last executing test programs: 8.349604557s ago: executing program 5 (id=163): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0xffff8001, @remote}, 0x1c) syz_emit_ethernet(0x4b, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x15, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1001}, {'U'}}}}}}}, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x11, 0x1000}}}}}}}, 0x0) 8.226507022s ago: executing program 3 (id=165): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000070000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.047622854s ago: executing program 3 (id=167): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@nodioread_nolock}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf84fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = memfd_create(&(0x7f00000051c0)='\x02A\xbb\xff\x00\x14\x16\xae\xe5j\xe50\x0f\x14%\xba\x13\x8bn^\xe77\xf3\xad', 0x1) fallocate(r4, 0x0, 0x8, 0x240000b4) r5 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa200, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0x4008700c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\a\x00'], 0x50) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$FUSE(r6, &(0x7f0000004180)={0x2020}, 0x2020) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x1) rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 7.948824827s ago: executing program 1 (id=168): openat$tun(0xffffffffffffff9c, 0x0, 0x35451d700300780a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x9, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r3, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) 6.605174027s ago: executing program 1 (id=172): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) recvfrom$inet(r0, 0x0, 0x56, 0x0, 0x0, 0x0) 6.329768112s ago: executing program 5 (id=173): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x4, 0x4, 0x7, 0x0, 0x1, 0xe92}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.683110651s ago: executing program 0 (id=178): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x3, {0x0, 0xff, 0x3}}, 0x18) 5.428341955s ago: executing program 1 (id=179): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x14, &(0x7f0000000040), 0x3b) 5.33917714s ago: executing program 0 (id=180): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) 5.041541574s ago: executing program 3 (id=182): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000780)={0x0, 0x0, 0x2e, "d41efec0717c524312be40b532a3b9f6325b03cc37d442bd9dcb06448a5e6a76691230ec0a86c3069391ea70597f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.971570362s ago: executing program 1 (id=183): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) ioctl$HIDIOCGRDESC(r0, 0x4008c002, 0x0) 4.860278163s ago: executing program 5 (id=186): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010c001ddf8208c007121522300000000109021b0001000000010904010001faf48d00090582"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) ioctl$HIDIOCGRDESC(r0, 0x4008c002, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000ff0921000000", @ANYRESOCT=r1, @ANYRES16=r1, @ANYRESOCT=r2], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) 4.19614714s ago: executing program 0 (id=191): sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000018140100000000000000000008000100010000000800030010"], 0x20}, 0x1, 0x0, 0x0, 0x200040c0}, 0x90) 4.039543632s ago: executing program 1 (id=192): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB='^:N'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff0000000705"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0xfffffffffffffda3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0xa, 0x7, 0xf7, 0x7, 0x1, 0x3, 0x7, 0x47, 0x14, 0x9, 0x4, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) 3.848042679s ago: executing program 0 (id=194): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@nodioread_nolock}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf84fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = memfd_create(&(0x7f00000051c0)='\x02A\xbb\xff\x00\x14\x16\xae\xe5j\xe50\x0f\x14%\xba\x13\x8bn^\xe77\xf3\xad', 0x1) fallocate(r4, 0x0, 0x8, 0x240000b4) r5 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa200, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0x4008700c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\a\x00'], 0x50) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$FUSE(r6, &(0x7f0000004180)={0x2020}, 0x2020) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x1) rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.400922177s ago: executing program 4 (id=196): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000720033030600000004000000070000"], 0x18}}, 0x20000010) 2.859426158s ago: executing program 2 (id=198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 2.395981266s ago: executing program 4 (id=199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) 2.249349888s ago: executing program 2 (id=200): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3dc8, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x68}, 0x94) 2.056284047s ago: executing program 2 (id=201): timer_create(0x1, 0x0, 0x0) mkdir(0x0, 0x1fc) open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xf) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.991701801s ago: executing program 4 (id=202): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="b7000000010000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000240), &(0x7f0000000280)=@udp=r0}, 0x20) sendto(r0, &(0x7f0000000700)='he', 0x2, 0x0, &(0x7f0000000080)=@in={0x2, 0x2382, @loopback}, 0x80) 1.78240985s ago: executing program 5 (id=203): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.622593434s ago: executing program 2 (id=204): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) ioctl$HIDIOCGRDESC(r0, 0x4008c002, 0x0) 1.526484987s ago: executing program 4 (id=205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000500002c0004800800010000000001200002800c00", 0x4e}], 0x1}, 0x800) 1.394441834s ago: executing program 3 (id=206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0x7, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x1c, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x8}}}, 0x2a) 1.203667583s ago: executing program 5 (id=207): openat$tun(0xffffffffffffff9c, 0x0, 0x35451d700300780a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x9, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) 1.012676347s ago: executing program 4 (id=208): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x4, 0x6, 0xf, 0x10}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc) 690.651871ms ago: executing program 3 (id=209): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="61090200030201830000ca70251733584facf495004bbd64e9abff0c5c9b17e45f16ca8d715895be3a6184e8986b93f5"], 0xa) 529.83882ms ago: executing program 0 (id=210): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000300), &(0x7f0000000340)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa08}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 412.735737ms ago: executing program 4 (id=211): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000720033030600000004000000070000"], 0x18}}, 0x20000010) 348.210503ms ago: executing program 2 (id=212): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x3, {0x0, 0xff, 0x3}}, 0x18) 290.78755ms ago: executing program 3 (id=213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 76.944632ms ago: executing program 0 (id=214): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r1, &(0x7f0000000580)='7', 0x1) read$char_usb(r1, &(0x7f0000000040)=""/134, 0x86) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x0, 0x0, 0x0) 28.504844ms ago: executing program 1 (id=215): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000035d, 0x20000084) recvmmsg(r1, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000180)=0x27b, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write(r3, &(0x7f0000000200)="89", 0xffe3) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x22, @dev={0xac, 0x14, 0x14, 0xc}}, {0x2, 0x4e24, @local}, 0x7d, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0xfdff, 0x0, 0x1009}) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') 14.42169ms ago: executing program 2 (id=216): timer_create(0x1, 0x0, 0x0) mkdir(0x0, 0x1fc) open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xf) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 0s ago: executing program 5 (id=217): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xfffffffffffffffe}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.45' (ED25519) to the list of known hosts. [ 91.245701][ T980] cfg80211: failed to load regulatory.db [ 95.072017][ T5592] cgroup: Unknown subsys name 'net' [ 95.168045][ T5592] cgroup: Unknown subsys name 'cpuset' [ 95.178487][ T5592] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 96.917837][ T5592] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 99.701923][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.711999][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.739847][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.748103][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 99.749001][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.757843][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.764653][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 99.779240][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.781900][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.787516][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.795271][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.802266][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.807859][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 99.815216][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.824038][ T5632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 99.828603][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.841306][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.849952][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.850473][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.857723][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 99.874866][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.885056][ T5632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.885435][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.900673][ T5631] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.901086][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 99.908672][ T5631] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.916083][ T5634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.931432][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 99.939714][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.940785][ T5634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 101.964138][ T4921] Bluetooth: hci1: command tx timeout [ 101.970125][ T51] Bluetooth: hci4: command tx timeout [ 102.042618][ T4921] Bluetooth: hci0: command tx timeout [ 102.042637][ T5614] Bluetooth: hci3: command tx timeout [ 102.042789][ T5614] Bluetooth: hci2: command tx timeout [ 102.048651][ T51] Bluetooth: hci5: command tx timeout [ 102.560141][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.568165][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.575551][ T5621] bridge_slave_0: entered allmulticast mode [ 102.583568][ T5621] bridge_slave_0: entered promiscuous mode [ 102.652177][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.659455][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.666735][ T5621] bridge_slave_1: entered allmulticast mode [ 102.674441][ T5621] bridge_slave_1: entered promiscuous mode [ 102.727063][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.734239][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.741381][ T5619] bridge_slave_0: entered allmulticast mode [ 102.749295][ T5619] bridge_slave_0: entered promiscuous mode [ 102.778518][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.786041][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.793594][ T5612] bridge_slave_0: entered allmulticast mode [ 102.801295][ T5612] bridge_slave_0: entered promiscuous mode [ 102.834602][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.841753][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.849051][ T5619] bridge_slave_1: entered allmulticast mode [ 102.856742][ T5619] bridge_slave_1: entered promiscuous mode [ 102.884228][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.891439][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.898747][ T5612] bridge_slave_1: entered allmulticast mode [ 102.906802][ T5612] bridge_slave_1: entered promiscuous mode [ 102.914522][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.921689][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.929223][ T5622] bridge_slave_0: entered allmulticast mode [ 102.937112][ T5622] bridge_slave_0: entered promiscuous mode [ 102.977013][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.011967][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.019247][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.027112][ T5622] bridge_slave_1: entered allmulticast mode [ 103.034874][ T5622] bridge_slave_1: entered promiscuous mode [ 103.076080][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.139537][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.162034][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.169430][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.178005][ T5611] bridge_slave_0: entered allmulticast mode [ 103.185750][ T5611] bridge_slave_0: entered promiscuous mode [ 103.197160][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.210058][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.234928][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.258364][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.265596][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.272977][ T5611] bridge_slave_1: entered allmulticast mode [ 103.280634][ T5611] bridge_slave_1: entered promiscuous mode [ 103.291123][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.303330][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.325791][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.333718][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.341122][ T5613] bridge_slave_0: entered allmulticast mode [ 103.349020][ T5613] bridge_slave_0: entered promiscuous mode [ 103.374459][ T5621] team0: Port device team_slave_0 added [ 103.418425][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.425822][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.433075][ T5613] bridge_slave_1: entered allmulticast mode [ 103.440762][ T5613] bridge_slave_1: entered promiscuous mode [ 103.464133][ T5621] team0: Port device team_slave_1 added [ 103.496636][ T5622] team0: Port device team_slave_0 added [ 103.519094][ T5619] team0: Port device team_slave_0 added [ 103.541824][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.554282][ T5612] team0: Port device team_slave_0 added [ 103.562545][ T5622] team0: Port device team_slave_1 added [ 103.584075][ T5619] team0: Port device team_slave_1 added [ 103.605938][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.617606][ T5612] team0: Port device team_slave_1 added [ 103.651730][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.675025][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.682093][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.708150][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.764457][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.787709][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.794993][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.821093][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.846785][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.854184][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.880316][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.893527][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.900526][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.927015][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.951934][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.959112][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.987147][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.010185][ T5611] team0: Port device team_slave_0 added [ 104.017764][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.024845][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.051121][ T4921] Bluetooth: hci1: command tx timeout [ 104.051187][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.056723][ T51] Bluetooth: hci4: command tx timeout [ 104.075292][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.082268][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.108742][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.122420][ T4921] Bluetooth: hci0: command tx timeout [ 104.122722][ T5614] Bluetooth: hci2: command tx timeout [ 104.127855][ T5634] Bluetooth: hci3: command tx timeout [ 104.140036][ T51] Bluetooth: hci5: command tx timeout [ 104.161952][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.169117][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.195652][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.210837][ T5611] team0: Port device team_slave_1 added [ 104.262808][ T5613] team0: Port device team_slave_0 added [ 104.307405][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.314506][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.340892][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.354735][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.361679][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.388042][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.404778][ T5613] team0: Port device team_slave_1 added [ 104.432604][ T5621] hsr_slave_0: entered promiscuous mode [ 104.439497][ T5621] hsr_slave_1: entered promiscuous mode [ 104.537498][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.544719][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.570717][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.601724][ T5612] hsr_slave_0: entered promiscuous mode [ 104.608332][ T5612] hsr_slave_1: entered promiscuous mode [ 104.615242][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 104.621020][ T5612] Cannot create hsr debugfs directory [ 104.667106][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.674323][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.700565][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.741202][ T5622] hsr_slave_0: entered promiscuous mode [ 104.748225][ T5622] hsr_slave_1: entered promiscuous mode [ 104.754798][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 104.760533][ T5622] Cannot create hsr debugfs directory [ 104.772757][ T5619] hsr_slave_0: entered promiscuous mode [ 104.780612][ T5619] hsr_slave_1: entered promiscuous mode [ 104.787144][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 104.792992][ T5619] Cannot create hsr debugfs directory [ 104.805915][ T5611] hsr_slave_0: entered promiscuous mode [ 104.812494][ T5611] hsr_slave_1: entered promiscuous mode [ 104.819376][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 104.825159][ T5611] Cannot create hsr debugfs directory [ 105.059998][ T5613] hsr_slave_0: entered promiscuous mode [ 105.066666][ T5613] hsr_slave_1: entered promiscuous mode [ 105.073310][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 105.079056][ T5613] Cannot create hsr debugfs directory [ 105.656539][ T5621] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.670424][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.679242][ T5621] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.690445][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.708913][ T5621] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.720668][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.729492][ T5621] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.740726][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.826578][ T5612] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.837975][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.847817][ T5612] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.858245][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.866484][ T5612] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.876664][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.885676][ T5612] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.896261][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.023392][ T5611] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.035766][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.047127][ T5611] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.057049][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.065912][ T5611] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.076246][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.090327][ T5611] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.100603][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.122474][ T51] Bluetooth: hci4: command tx timeout [ 106.122771][ T5634] Bluetooth: hci1: command tx timeout [ 106.203170][ T5634] Bluetooth: hci5: command tx timeout [ 106.203203][ T51] Bluetooth: hci3: command tx timeout [ 106.203246][ T51] Bluetooth: hci0: command tx timeout [ 106.214342][ T5634] Bluetooth: hci2: command tx timeout [ 106.258237][ T5622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.268891][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.290087][ T5622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.302026][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.311695][ T5622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.324199][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.355031][ T5622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.367698][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.423744][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.494917][ T5619] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 106.506900][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.527556][ T5619] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 106.538095][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.559986][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.569056][ T5619] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 106.580804][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.591118][ T5619] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 106.601040][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.641195][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.652107][ T134] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.659728][ T134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.697241][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.704385][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.798016][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.826197][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.840353][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.851231][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.861315][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.881893][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.893156][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.901795][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.918118][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.931338][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.968643][ T134] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.975846][ T134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.993772][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.000971][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.085767][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.129647][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.136826][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.193727][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.200929][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.253076][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.394928][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.422005][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.469995][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.477225][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.503312][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.510501][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.609359][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.667194][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.674424][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.715391][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.722618][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.926894][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.038957][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.106377][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.113639][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.150590][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.157849][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.203844][ T51] Bluetooth: hci4: command tx timeout [ 108.205074][ T5634] Bluetooth: hci1: command tx timeout [ 108.284358][ T5634] Bluetooth: hci2: command tx timeout [ 108.284602][ T51] Bluetooth: hci5: command tx timeout [ 108.289842][ T4921] Bluetooth: hci3: command tx timeout [ 108.295382][ T5614] Bluetooth: hci0: command tx timeout [ 108.781174][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.013020][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.177766][ T5621] veth0_vlan: entered promiscuous mode [ 109.240205][ T5621] veth1_vlan: entered promiscuous mode [ 109.353907][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.444216][ T5621] veth0_macvtap: entered promiscuous mode [ 109.514091][ T5621] veth1_macvtap: entered promiscuous mode [ 109.676085][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.721866][ T5611] veth0_vlan: entered promiscuous mode [ 109.782011][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.823967][ T5611] veth1_vlan: entered promiscuous mode [ 109.855625][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.867028][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.884264][ T1031] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.142755][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.196475][ T5611] veth0_macvtap: entered promiscuous mode [ 110.210493][ T5611] veth1_macvtap: entered promiscuous mode [ 110.252706][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.289331][ T1031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.309273][ T1031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.342996][ T5612] veth0_vlan: entered promiscuous mode [ 110.403255][ T5622] veth0_vlan: entered promiscuous mode [ 110.425588][ T5612] veth1_vlan: entered promiscuous mode [ 110.436941][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.442705][ T63] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.447582][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.467407][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.480676][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.494003][ T134] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.515511][ T5622] veth1_vlan: entered promiscuous mode [ 110.597553][ T5621] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 110.688233][ T5612] veth0_macvtap: entered promiscuous mode [ 110.713057][ T63] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.801016][ T5619] veth0_vlan: entered promiscuous mode [ 110.821160][ T5612] veth1_macvtap: entered promiscuous mode [ 110.836497][ T5613] veth0_vlan: entered promiscuous mode [ 110.853649][ T5622] veth0_macvtap: entered promiscuous mode [ 110.897999][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.928004][ T5622] veth1_macvtap: entered promiscuous mode [ 110.935493][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.966776][ T5619] veth1_vlan: entered promiscuous mode [ 111.031888][ T5613] veth1_vlan: entered promiscuous mode [ 111.056566][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.154997][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.187002][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.202451][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.223565][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.256865][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.420147][ T5619] veth0_macvtap: entered promiscuous mode [ 111.505222][ T5619] veth1_macvtap: entered promiscuous mode [ 111.521709][ T5613] veth0_macvtap: entered promiscuous mode [ 111.594647][ T5613] veth1_macvtap: entered promiscuous mode [ 111.682523][ T1031] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.907259][ T1096] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.916322][ T1031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.936381][ T1031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.976000][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.012370][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.029889][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.054051][ T1096] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.091722][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.150357][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.159845][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.168901][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.278324][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.313669][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.455501][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.465798][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.493726][ T5862] Zero length message leads to an empty skb [ 112.687529][ T41] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.749087][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.793256][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.946014][ T1031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.978398][ T1031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.034615][ T1096] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.059344][ T1096] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.160651][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.191817][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.241376][ T5873] tipc: Started in network mode [ 113.267244][ T5873] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 113.296350][ T5873] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 113.334387][ T5873] tipc: Enabled bearer , priority 10 [ 113.351898][ T169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.371400][ T169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.395417][ T41] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.444644][ T41] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.493649][ T5614] Bluetooth: hci5: command tx timeout [ 113.499352][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.529757][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.622639][ T169] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.670069][ T169] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.739253][ T5887] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 113.749907][ T5745] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 113.757927][ T169] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.786355][ T169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.834703][ T134] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.852562][ T5890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16'. [ 113.863718][ T134] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.903087][ T5893] syz.0.17 uses obsolete (PF_INET,SOCK_PACKET) [ 114.046968][ T1031] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.092837][ T1031] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.382592][ T24] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 114.738267][ T5779] tipc: Node number set to 1 [ 115.290897][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.23'. [ 115.988929][ T5937] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 116.049034][ T5937] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 116.114542][ T5938] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 116.153028][ T5937] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 116.237712][ T5937] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 116.395821][ T5938] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 116.397845][ T5939] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 116.566841][ T5938] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 116.567847][ T5939] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 116.657627][ T5938] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 118.598474][ T5924] batadv_slave_0: entered promiscuous mode [ 118.606241][ T5925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.627436][ T5925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.076740][ T5948] warning: `syz.1.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 119.218437][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'. [ 119.304646][ T5949] syzkaller0: entered promiscuous mode [ 119.306303][ T187] hid-generic 0005:10CF:0004.0001: item fetching failed at offset 0/1 [ 119.321615][ T5949] syzkaller0: entered allmulticast mode [ 119.374596][ T187] hid-generic 0005:10CF:0004.0001: probe with driver hid-generic failed with error -22 [ 119.446804][ T5885] Set syz1 is full, maxelem 65536 reached [ 119.527875][ T5961] syzkaller0: entered promiscuous mode [ 119.559369][ T5961] syzkaller0: entered allmulticast mode [ 119.585832][ T5964] netlink: 32 bytes leftover after parsing attributes in process `syz.1.33'. [ 120.092614][ T5991] netlink: 'syz.0.40': attribute type 1 has an invalid length. [ 120.164021][ T5971] syzkaller1: entered promiscuous mode [ 120.180882][ T5971] syzkaller1: entered allmulticast mode [ 122.049415][ T6004] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 122.614549][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 122.710221][ T5972] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 123.538374][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.66'. [ 123.984163][ T6098] syzkaller1: entered promiscuous mode [ 123.989722][ T6098] syzkaller1: entered allmulticast mode [ 124.108259][ T6101] loop5: detected capacity change from 0 to 512 [ 124.137081][ T6101] ext4: Bad value for 'data' [ 125.912051][ T6084] IPVS: starting estimator thread 0... [ 126.007116][ T6148] IPVS: using max 23 ests per chain, 55200 per kthread [ 126.103600][ T6152] syzkaller0: entered promiscuous mode [ 126.121492][ T6152] syzkaller0: entered allmulticast mode [ 126.160673][ T6156] loop1: detected capacity change from 0 to 512 [ 126.187970][ T6156] ext4: Bad value for 'data' [ 126.854120][ T6079] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 127.300153][ T6167] loop2: detected capacity change from 0 to 512 [ 127.348693][ T6167] EXT4-fs (loop2): Test dummy encryption mode enabled [ 127.382126][ T6167] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 127.429198][ T6167] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 127.528083][ T6167] EXT4-fs (loop2): 1 truncate cleaned up [ 127.555974][ T6167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.894302][ T6084] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.923805][ T6084] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.272061][ T6190] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 129.986301][ T6085] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.003639][ T6186] fscrypt: AES-256-XTS using blk-crypto-fallback [ 132.364503][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.385279][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.624447][ T6201] loop3: detected capacity change from 0 to 512 [ 132.632199][ T6201] ext4: Bad value for 'data' [ 133.638589][ T5621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.837452][ T6089] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.518912][ T6225] 0: reclassify loop, rule prio 0, protocol 03 [ 134.781815][ T6236] loop2: detected capacity change from 0 to 512 [ 134.817708][ T6236] EXT4-fs (loop2): Test dummy encryption mode enabled [ 134.852543][ T6236] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 134.909312][ T6236] EXT4-fs (loop2): 1 truncate cleaned up [ 134.925935][ T6238] loop3: detected capacity change from 0 to 512 [ 134.935342][ T6236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.948843][ T6238] ext4: Bad value for 'data' [ 137.072883][ T6216] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 138.355328][ T5621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.450032][ T6251] syzkaller0: entered promiscuous mode [ 138.468314][ T6251] syzkaller0: entered allmulticast mode [ 138.615485][ T29] audit: type=1804 audit(1787601037.940:2): pid=6260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.132" name="/newroot/24/file0" dev="tmpfs" ino=144 res=1 errno=0 [ 139.471250][ T6279] syzkaller0: entered promiscuous mode [ 139.491985][ T6279] syzkaller0: entered allmulticast mode [ 139.515460][ T6283] loop1: detected capacity change from 0 to 512 [ 139.546394][ T6283] EXT4-fs (loop1): Test dummy encryption mode enabled [ 139.576252][ T6283] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 139.633388][ T6283] EXT4-fs (loop1): 1 truncate cleaned up [ 139.711473][ T6283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.885968][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 139.943935][ T6296] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.952695][ T6296] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.991805][ T5777] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 141.125509][ T5777] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 141.142964][ T5777] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.392408][ T5593] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 141.922451][ T5593] usb 3-1: Using ep0 maxpacket: 8 [ 141.928638][ T5593] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 141.940224][ T5593] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 141.952195][ T5593] usb 3-1: config 0 has no interface number 0 [ 141.970484][ T5593] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 141.981997][ T5593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.104354][ T5593] usb 3-1: config 0 descriptor?? [ 142.161979][ T5593] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 142.292370][ T5777] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 142.307939][ T5777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.402165][ T5611] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.445367][ T5777] usb 5-1: config 0 descriptor?? [ 142.516053][ T5777] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 142.529008][ T5777] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 142.568964][ T6289] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 142.632978][ T6335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.669237][ T6335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.438195][ T44] usb 3-1: USB disconnect, device number 2 [ 143.540412][ T6358] loop3: detected capacity change from 0 to 512 [ 143.565019][ T6358] EXT4-fs (loop3): Test dummy encryption mode enabled [ 143.590513][ T6358] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 143.657999][ T6358] EXT4-fs (loop3): 1 truncate cleaned up [ 143.803499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 143.880387][ T6358] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.934258][ T5615] usb 5-1: USB disconnect, device number 2 [ 144.390593][ T6372] capability: warning: `syz.3.167' uses deprecated v2 capabilities in a way that may be insecure [ 146.531502][ T5613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.212374][ T5779] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 147.244809][ T5752] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 147.374823][ T5779] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 147.404968][ T5779] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.422456][ T5752] usb 6-1: Using ep0 maxpacket: 8 [ 147.423064][ T5779] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 147.434709][ T5752] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 147.464579][ T5779] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 147.469028][ T5752] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 147.502358][ T5779] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.514002][ T5752] usb 6-1: config 0 has no interface number 0 [ 147.543427][ T5752] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 147.564998][ T5752] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.584993][ T5752] usb 6-1: config 0 descriptor?? [ 147.672388][ T5779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.674892][ T5752] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 147.709427][ T5779] usb 4-1: config 0 descriptor?? [ 147.777728][ T5779] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 147.809515][ T5779] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 147.931121][ T6436] loop0: detected capacity change from 0 to 512 [ 148.006069][ T6436] EXT4-fs (loop0): Test dummy encryption mode enabled [ 148.019317][ T5779] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 148.037455][ T6436] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 148.138705][ T6436] EXT4-fs (loop0): 1 truncate cleaned up [ 148.154607][ T6436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.194823][ T5779] usb 2-1: Using ep0 maxpacket: 16 [ 148.241057][ T5779] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 148.273042][ T6446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.305123][ T5779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.352698][ T5779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.381465][ T5779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.395367][ T6446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.593116][ T5779] usb 2-1: config 0 descriptor?? [ 149.007271][ T44] usb 6-1: USB disconnect, device number 2 [ 149.627434][ T5779] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 149.634689][ T5779] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 149.646085][ T5779] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 149.654610][ T5779] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 149.920793][ T6428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.024205][ T44] usb 4-1: USB disconnect, device number 2 [ 150.073811][ T6428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.964234][ T5779] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0 [ 150.983066][ T5779] corsair 0003:1B1C:1B02.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 151.024076][ T5622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.074723][ T5779] corsair 0003:1B1C:1B02.0002: Failed to get K90 initial state (error 0). [ 151.350967][ T187] usb 2-1: USB disconnect, device number 2 [ 151.526107][ T187] ------------[ cut here ]------------ [ 151.531655][ T187] ODEBUG: free active (active state 0) object: ffff8880342eb2c8 object type: work_struct hint: k90_record_led_work+0x0/0x1f0 [ 151.544717][ T187] WARNING: lib/debugobjects.c:629 at debug_print_object+0x198/0x2b0, CPU#0: kworker/0:2/187 [ 151.555114][ T187] Modules linked in: [ 151.559260][ T187] CPU: 0 UID: 0 PID: 187 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 151.568754][ T187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 151.578944][ T187] Workqueue: usb_hub_wq hub_event [ 151.584363][ T187] RIP: 0010:debug_print_object+0x1a5/0x2b0 [ 151.590214][ T187] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d d8 9a 1f 0c 41 56 48 8b 14 ed 40 cd 61 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 e2 dd 14 0c 01 48 83 c4 18 5b 5d 41 5c 41 [ 151.611657][ T187] RSP: 0018:ffffc9000308f1e8 EFLAGS: 00010246 [ 151.619105][ T187] RAX: dffffc0000000000 RBX: ffffc9000308f2d0 RCX: 0000000000000000 [ 151.627128][ T187] RDX: ffffffff8c61cc80 RSI: ffffffff8c61c820 RDI: ffffffff914f9450 [ 151.635447][ T187] RBP: 0000000000000003 R08: ffff8880342eb2c8 R09: ffffffff8bee1920 [ 151.643632][ T187] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c61c820 [ 151.651630][ T187] R13: ffffffff8bee1960 R14: ffffffff8903f530 R15: ffffc9000308f2e8 [ 151.659648][ T187] FS: 0000000000000000(0000) GS:ffff888123b7b000(0000) knlGS:0000000000000000 [ 151.668666][ T187] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.675325][ T187] CR2: 00007fecce15d520 CR3: 000000005b914000 CR4: 0000000000350ef0 [ 151.683366][ T187] Call Trace: [ 151.686651][ T187] [ 151.691518][ T187] ? __pfx_k90_record_led_work+0x10/0x10 [ 151.691537][ T6482] fido_id[6482]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 151.712933][ T187] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 151.718792][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.724559][ T187] debug_check_no_obj_freed+0x4da/0x630 [ 151.730166][ T187] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 151.736342][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.742037][ T187] ? kasan_quarantine_put+0x104/0x240 [ 151.747486][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.753195][ T187] ? lockdep_hardirqs_on+0x7d/0x110 [ 151.758431][ T187] ? corsair_remove+0xfa/0x2f0 [ 151.763273][ T187] ? corsair_remove+0x90/0x2f0 [ 151.768068][ T187] kfree+0x3d6/0x6c0 [ 151.772047][ T187] ? mutex_is_locked+0x17/0x60 [ 151.776927][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.782637][ T187] corsair_remove+0xfa/0x2f0 [ 151.787265][ T187] ? __pfx_corsair_remove+0x10/0x10 [ 151.794174][ T187] hid_device_remove+0xd1/0x200 [ 151.800215][ T187] ? __pfx_hid_device_remove+0x10/0x10 [ 151.805787][ T187] device_remove+0xcb/0x180 [ 151.810323][ T187] device_release_driver_internal+0x44e/0x620 [ 151.816464][ T187] ? __entry_text_end+0x102035/0x102039 [ 151.822052][ T187] bus_remove_device+0x2bc/0x560 [ 151.827054][ T187] ? __pfx_bus_remove_device+0x10/0x10 [ 151.832712][ T187] ? __pfx_device_remove_attrs+0x10/0x10 [ 151.838403][ T187] device_del+0x376/0x9b0 [ 151.842800][ T187] ? __pfx_device_del+0x10/0x10 [ 151.847675][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.853386][ T187] ? do_raw_spin_lock+0x128/0x260 [ 151.858441][ T187] ? find_held_lock+0x2b/0x80 [ 151.863234][ T187] hid_destroy_device+0x19c/0x240 [ 151.868319][ T187] usbhid_disconnect+0xa0/0xe0 [ 151.873180][ T187] usb_unbind_interface+0x1dd/0x9e0 [ 151.878444][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.884216][ T187] ? __pfx_usb_unbind_interface+0x10/0x10 [ 151.889989][ T187] device_remove+0x12a/0x180 [ 151.896339][ T187] device_release_driver_internal+0x44e/0x620 [ 151.903611][ T187] ? __entry_text_end+0x102035/0x102039 [ 151.909233][ T187] bus_remove_device+0x2bc/0x560 [ 151.914234][ T187] ? __pfx_bus_remove_device+0x10/0x10 [ 151.919719][ T187] ? __pfx_device_remove_attrs+0x10/0x10 [ 151.925462][ T187] device_del+0x376/0x9b0 [ 151.929831][ T187] ? __pfx_device_del+0x10/0x10 [ 151.934757][ T187] ? kobject_put+0xb9/0x640 [ 151.939314][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.945126][ T187] usb_disable_device+0x367/0x810 [ 151.950208][ T187] usb_disconnect+0x2e2/0x9a0 [ 151.954967][ T187] hub_event+0x1bb1/0x4420 [ 151.959460][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.965457][ T187] ? __lock_acquire+0x4c5/0x1ec0 [ 151.970441][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.976272][ T187] ? do_raw_spin_unlock+0x145/0x1e0 [ 151.981502][ T187] ? __pfx_hub_event+0x10/0x10 [ 151.986410][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 151.992104][ T187] ? check_prev_add+0x8b0/0xe60 [ 151.998703][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.005548][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.011242][ T187] ? process_one_work+0x906/0x1b10 [ 152.016453][ T187] ? process_one_work+0x906/0x1b10 [ 152.021606][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.027319][ T187] process_one_work+0xac7/0x1b10 [ 152.032360][ T187] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 152.038202][ T187] ? __pfx_process_one_work+0x10/0x10 [ 152.044361][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.050051][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.056112][ T187] worker_thread+0x5ef/0xe50 [ 152.060761][ T187] ? kthread+0x13a/0x450 [ 152.065085][ T187] ? __pfx_worker_thread+0x10/0x10 [ 152.070233][ T187] kthread+0x373/0x450 [ 152.074384][ T187] ? __pfx_kthread+0x10/0x10 [ 152.079014][ T187] ret_from_fork+0x730/0xd60 [ 152.083701][ T187] ? __pfx_ret_from_fork+0x10/0x10 [ 152.088860][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.094587][ T187] ? __switch_to+0x800/0x10f0 [ 152.101060][ T187] ? __switch_to_asm+0x39/0x70 [ 152.107054][ T187] ? __pfx_kthread+0x10/0x10 [ 152.111713][ T187] ret_from_fork_asm+0x1a/0x30 [ 152.116574][ T187] [ 152.119603][ T187] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 152.126888][ T187] CPU: 0 UID: 0 PID: 187 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 152.136194][ T187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 152.146263][ T187] Workqueue: usb_hub_wq hub_event [ 152.151336][ T187] Call Trace: [ 152.154614][ T187] [ 152.157552][ T187] dump_stack_lvl+0x100/0x190 [ 152.162272][ T187] vpanic+0x553/0x970 [ 152.166280][ T187] ? __pfx_vpanic+0x10/0x10 [ 152.170820][ T187] panic+0xd1/0xe0 [ 152.174567][ T187] ? __pfx_panic+0x10/0x10 [ 152.179028][ T187] check_panic_on_warn.cold+0x19/0x34 [ 152.184429][ T187] ? debug_print_object+0x198/0x2b0 [ 152.189669][ T187] __warn.cold+0x191/0x318 [ 152.194116][ T187] __report_bug+0x30f/0x440 [ 152.198662][ T187] ? debug_print_object+0x198/0x2b0 [ 152.203895][ T187] ? __pfx___report_bug+0x10/0x10 [ 152.208943][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.214606][ T187] ? lock_acquire+0x1b9/0x370 [ 152.219322][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.224977][ T187] ? mark_held_locks+0x40/0x70 [ 152.229778][ T187] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 152.235603][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.241259][ T187] ? lockdep_hardirqs_on+0x7d/0x110 [ 152.246486][ T187] report_bug_entry+0xe2/0x290 [ 152.251278][ T187] ? debug_print_object+0x1a5/0x2b0 [ 152.256501][ T187] handle_bug+0x1cd/0x2a0 [ 152.260864][ T187] exc_invalid_op+0x17/0x50 [ 152.265398][ T187] asm_exc_invalid_op+0x1a/0x20 [ 152.270268][ T187] RIP: 0010:debug_print_object+0x1a5/0x2b0 [ 152.276099][ T187] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d d8 9a 1f 0c 41 56 48 8b 14 ed 40 cd 61 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 e2 dd 14 0c 01 48 83 c4 18 5b 5d 41 5c 41 [ 152.295723][ T187] RSP: 0018:ffffc9000308f1e8 EFLAGS: 00010246 [ 152.301809][ T187] RAX: dffffc0000000000 RBX: ffffc9000308f2d0 RCX: 0000000000000000 [ 152.309795][ T187] RDX: ffffffff8c61cc80 RSI: ffffffff8c61c820 RDI: ffffffff914f9450 [ 152.317776][ T187] RBP: 0000000000000003 R08: ffff8880342eb2c8 R09: ffffffff8bee1920 [ 152.325755][ T187] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c61c820 [ 152.333732][ T187] R13: ffffffff8bee1960 R14: ffffffff8903f530 R15: ffffc9000308f2e8 [ 152.341718][ T187] ? __pfx_k90_record_led_work+0x10/0x10 [ 152.347399][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.353063][ T187] ? __pfx_k90_record_led_work+0x10/0x10 [ 152.358726][ T187] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 152.364563][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.370226][ T187] debug_check_no_obj_freed+0x4da/0x630 [ 152.375816][ T187] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 152.381932][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.387590][ T187] ? kasan_quarantine_put+0x104/0x240 [ 152.392980][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.398634][ T187] ? lockdep_hardirqs_on+0x7d/0x110 [ 152.403860][ T187] ? corsair_remove+0xfa/0x2f0 [ 152.408660][ T187] ? corsair_remove+0x90/0x2f0 [ 152.413445][ T187] kfree+0x3d6/0x6c0 [ 152.417402][ T187] ? mutex_is_locked+0x17/0x60 [ 152.422208][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.427880][ T187] corsair_remove+0xfa/0x2f0 [ 152.432497][ T187] ? __pfx_corsair_remove+0x10/0x10 [ 152.437728][ T187] hid_device_remove+0xd1/0x200 [ 152.442609][ T187] ? __pfx_hid_device_remove+0x10/0x10 [ 152.448115][ T187] device_remove+0xcb/0x180 [ 152.452638][ T187] device_release_driver_internal+0x44e/0x620 [ 152.458732][ T187] ? __entry_text_end+0x102035/0x102039 [ 152.464303][ T187] bus_remove_device+0x2bc/0x560 [ 152.469256][ T187] ? __pfx_bus_remove_device+0x10/0x10 [ 152.474725][ T187] ? __pfx_device_remove_attrs+0x10/0x10 [ 152.480383][ T187] device_del+0x376/0x9b0 [ 152.484740][ T187] ? __pfx_device_del+0x10/0x10 [ 152.489608][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.495265][ T187] ? do_raw_spin_lock+0x128/0x260 [ 152.500301][ T187] ? find_held_lock+0x2b/0x80 [ 152.505006][ T187] hid_destroy_device+0x19c/0x240 [ 152.510063][ T187] usbhid_disconnect+0xa0/0xe0 [ 152.514857][ T187] usb_unbind_interface+0x1dd/0x9e0 [ 152.520096][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.525752][ T187] ? __pfx_usb_unbind_interface+0x10/0x10 [ 152.531561][ T187] device_remove+0x12a/0x180 [ 152.536170][ T187] device_release_driver_internal+0x44e/0x620 [ 152.542260][ T187] ? __entry_text_end+0x102035/0x102039 [ 152.547842][ T187] bus_remove_device+0x2bc/0x560 [ 152.552794][ T187] ? __pfx_bus_remove_device+0x10/0x10 [ 152.558260][ T187] ? __pfx_device_remove_attrs+0x10/0x10 [ 152.563917][ T187] device_del+0x376/0x9b0 [ 152.568273][ T187] ? __pfx_device_del+0x10/0x10 [ 152.573151][ T187] ? kobject_put+0xb9/0x640 [ 152.577716][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.583389][ T187] usb_disable_device+0x367/0x810 [ 152.588473][ T187] usb_disconnect+0x2e2/0x9a0 [ 152.593202][ T187] hub_event+0x1bb1/0x4420 [ 152.597688][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.603357][ T187] ? __lock_acquire+0x4c5/0x1ec0 [ 152.608387][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.614049][ T187] ? do_raw_spin_unlock+0x145/0x1e0 [ 152.619265][ T187] ? __pfx_hub_event+0x10/0x10 [ 152.624059][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.629721][ T187] ? check_prev_add+0x8b0/0xe60 [ 152.634627][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.640299][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.645960][ T187] ? process_one_work+0x906/0x1b10 [ 152.651105][ T187] ? process_one_work+0x906/0x1b10 [ 152.656259][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.661937][ T187] process_one_work+0xac7/0x1b10 [ 152.666924][ T187] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 152.672769][ T187] ? __pfx_process_one_work+0x10/0x10 [ 152.678178][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.683871][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.689551][ T187] worker_thread+0x5ef/0xe50 [ 152.694206][ T187] ? kthread+0x13a/0x450 [ 152.698473][ T187] ? __pfx_worker_thread+0x10/0x10 [ 152.703624][ T187] kthread+0x373/0x450 [ 152.707729][ T187] ? __pfx_kthread+0x10/0x10 [ 152.712355][ T187] ret_from_fork+0x730/0xd60 [ 152.716997][ T187] ? __pfx_ret_from_fork+0x10/0x10 [ 152.722148][ T187] ? srso_alias_return_thunk+0x5/0xfbef5 [ 152.727804][ T187] ? __switch_to+0x800/0x10f0 [ 152.732508][ T187] ? __switch_to_asm+0x39/0x70 [ 152.737302][ T187] ? __pfx_kthread+0x10/0x10 [ 152.741924][ T187] ret_from_fork_asm+0x1a/0x30 [ 152.746751][ T187] [ 152.749996][ T187] Kernel Offset: disabled [ 152.754319][ T187] Rebooting in 86400 seconds..