last executing test programs: 8m13.407035117s ago: executing program 3 (id=4): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000009c0)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x1e) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)="39afabf445b93dc11880518260bb4f8db20c78a639c56692", 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020206b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) close(r3) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0x5, 0x7, 0x0, &(0x7f0000000080)="0080048b0038e2", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x606}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0x24000890}, 0x404c080) r5 = socket$inet(0x2, 0x2, 0x11) sendto$inet(r5, &(0x7f0000000800)="1234", 0x4, 0x0, &(0x7f0000000880)={0x2, 0x1234, @local}, 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) 8m8.706678005s ago: executing program 3 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004400)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f000001d400)=0x80000000000003) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f000001d440), 0x88b02, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$usbfs(&(0x7f000001d480), 0x400000001ff, 0x101201) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f000001d4c0)=@urb_type_control={0x2, {}, 0xfffffff6, 0xc0, &(0x7f000001d500)={0x0, 0x3, 0x1, 0x5}, 0x8, 0x8000, 0x4, 0x0, 0x1000010, 0x20004, 0x0}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) pread64(r6, &(0x7f0000004200)=""/236, 0xec, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, &(0x7f0000000000)=0x2) write$FUSE_INIT(r6, &(0x7f0000004300)={0x50, 0x0, r7}, 0x50) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x7], [0x3, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) 8m8.605924177s ago: executing program 4 (id=5): syz_emit_ethernet(0xfc3, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x218c01, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x5, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0x1, 0x6, 0x4, 0x80000001}, {0x2bbc, 0x0, 0x5, 0xc}, {0x7, 0x9, 0x4}, {0x8000, 0x6, 0x6, 0x7fffffff}]}) r1 = fanotify_init(0x20, 0x101000) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000680)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000006c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r5, &(0x7f0000003200)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f000001c200)=0x7) clock_settime(0x0, &(0x7f000001c240)={0x77359400}) fanotify_mark(r1, 0x1, 0x8000000, r0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xb, 0x0, &(0x7f0000000140)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000400)={0x0, 0xffffffffffffffff}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f00000004c0)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000500)={0x1, @in6={{0xa, 0x4e24, 0x10001, @loopback}}, 0xa356, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 8m1.912079746s ago: executing program 4 (id=13): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x200, 0xfc000004, 0x7, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x2, 0x401, 0x1, 0x405, 0x0, 0x880, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x2000007, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x8, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0xac12, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0x4, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x48e, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd2, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x4, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfe, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x2, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x1, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(0x0, &(0x7f00000003c0)={0x5, 0x5, 0x80, 0x1, 0x1, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r2, 0x40086e81, &(0x7f00000001c0)=0x5) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xef, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="bf"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7m57.455465139s ago: executing program 3 (id=17): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "9e87a06f998fd651", "709563752c78d076354eedf7ab795fa7", "597c859f", "894eb932381d1045"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0xfe04}], 0x1) 7m44.258218378s ago: executing program 32 (id=13): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x200, 0xfc000004, 0x7, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x2, 0x401, 0x1, 0x405, 0x0, 0x880, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x2000007, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x8, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0xac12, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0x4, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x48e, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd2, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x4, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfe, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x2, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x1, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(0x0, &(0x7f00000003c0)={0x5, 0x5, 0x80, 0x1, 0x1, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r2, 0x40086e81, &(0x7f00000001c0)=0x5) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xef, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="bf"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7m41.349268999s ago: executing program 33 (id=17): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "9e87a06f998fd651", "709563752c78d076354eedf7ab795fa7", "597c859f", "894eb932381d1045"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0xfe04}], 0x1) 5m44.798371782s ago: executing program 2 (id=138): syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x305, 0x0, 0x0, 0x0, 0xffe8, 0x0, 0x6, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 5m44.55448182s ago: executing program 2 (id=140): syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 5m44.385292782s ago: executing program 2 (id=141): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) syz_open_dev$usbmon(0x0, 0x80000001, 0x28100) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0x0, 0x1}, @restrict={0xe, 0x0, 0x0, 0xb, 0x4}]}}, 0x0, 0x42, 0x0, 0x0, 0x3}, 0x28) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1}, 0xe) sendmmsg$inet_sctp(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x30}, {&(0x7f0000000340)=@in6={0xa, 0x4e23, 0xa8, @private0, 0x2}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000003c0)="e7e2f92fb585766089af8707efc85b76ff9adbeae4cec352e75f9856d80a", 0x1e}], 0x1, &(0x7f0000000500)=[@dstaddrv6={0x20, 0x84, 0x8, @empty}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x50, 0x1}], 0x2, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) recvmmsg$unix(r2, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r3, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r3, &(0x7f0000000080), 0x12) connect$x25(r3, &(0x7f0000000600), 0x12) 5m42.72362684s ago: executing program 2 (id=143): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x8}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48) 5m40.08986452s ago: executing program 2 (id=145): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f00000003c0)=""/102392, 0x18ff8) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f00000001c0)={0x48}) 5m38.511257534s ago: executing program 2 (id=147): r0 = fanotify_init(0x200, 0x8000) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x7) r1 = memfd_create(0x0, 0x3) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x48000046, r2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0xf1ba, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x0, 0x0, 0x65900, 0x65f40}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'batadv_slave_0\x00', &(0x7f0000000300)=@ethtool_wolinfo={0x5, 0x7, 0x3, "9748d5a5b939"}}) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = memfd_create(&(0x7f0000000340)='e\xf4E\x88-\x00', 0x0) pwritev(r6, &(0x7f0000000380)=[{&(0x7f00000003c0)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r5, r6, 0x0, 0x8000fb00) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000004c0), 0xa00, 0x0) 5m20.533446139s ago: executing program 34 (id=147): r0 = fanotify_init(0x200, 0x8000) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x7) r1 = memfd_create(0x0, 0x3) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x48000046, r2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0xf1ba, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x0, 0x0, 0x65900, 0x65f40}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'batadv_slave_0\x00', &(0x7f0000000300)=@ethtool_wolinfo={0x5, 0x7, 0x3, "9748d5a5b939"}}) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = memfd_create(&(0x7f0000000340)='e\xf4E\x88-\x00', 0x0) pwritev(r6, &(0x7f0000000380)=[{&(0x7f00000003c0)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r5, r6, 0x0, 0x8000fb00) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000004c0), 0xa00, 0x0) 16.699453719s ago: executing program 1 (id=406): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101000, 0x63) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r1, r1, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) userfaultfd(0x801) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[], 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffff9, 0x10000000005, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24008011) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000180)={[0x3, 0x934, 0x2, 0x100000001, 0x10001, 0xf69f, 0x6, 0x200, 0x100000000, 0x2, 0x10001, 0x7, 0x400, 0x80, 0x6071, 0x40], 0x41000, 0x8000}) socket(0x80000000000000a, 0x2, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r0, 0x4020aed2, &(0x7f0000000340)={0x2226ffff, 0x2000}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x130}}, 0x0) 14.088821342s ago: executing program 0 (id=408): openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101000, 0x63) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) userfaultfd(0x801) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[], 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffff9, 0x10000000005, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24008011) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000180)={[0x3, 0x934, 0x2, 0x100000001, 0x10001, 0xf69f, 0x6, 0x200, 0x100000000, 0x2, 0x10001, 0x7, 0x400, 0x80, 0x6071, 0x40], 0x41000, 0x8000}) r4 = socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x130}}, 0x0) 13.036101564s ago: executing program 1 (id=409): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, 0x0, 0x0) unshare(0x6a060000) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x5) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x400000b0, 0x0, 0x5}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000580)={0x2020}, 0x2020) writev(0xffffffffffffffff, &(0x7f00000025c0), 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect(0x0, 0x36, &(0x7f0000002600)=ANY=[@ANYBLOB="120100033ca7ff1063110001bb23010203010902240001040e10830904560b02e80ef9060905030300047f580609058b03"], &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000002680)={0x7, 0x0, [{0x80000000, 0x3, 0x4da1e89fc77a7b65, 0xfffffffc, 0x1, 0x1501, 0x6}, {0x40000001, 0x5, 0x0, 0x8, 0x3, 0x5, 0x101}, {0x40000001, 0x8, 0x4, 0x401, 0x5, 0x62d, 0x80000000}, {0xc0000001, 0x0, 0x1, 0x7ff, 0x3b8, 0x2, 0x5}, {0x1, 0x8, 0x5, 0x14, 0x2d3, 0x0, 0x27e}, {0x40000001, 0x1, 0x1, 0x0, 0xc0, 0x2, 0xff}, {0x80000000, 0x6, 0x5, 0x5, 0x2, 0x20c00, 0x4}]}) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x41, &(0x7f00000027c0)=0x4, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000002880)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x80e0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000029c0)={0x58, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'vlan0\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 9.462633947s ago: executing program 0 (id=410): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001000000000904000000030002"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x200) close(0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@iv={0x18}], 0x18, 0x4000851}], 0x1, 0x2400c081) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000200)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB="00000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000500)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.285422045s ago: executing program 1 (id=411): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) inotify_init1(0x800) pipe(&(0x7f0000000640)) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000840)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000008c0)=r0) r3 = socket(0x10, 0x800, 0xfffffffc) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0xffffff, 0x0, 0x0, 0x4}, 0x10) connect$unix(r1, &(0x7f0000000900)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r1, &(0x7f00000009c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000a40)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./sys/bus/pci/rescan\x00', 0x1, 0x0) socket$inet(0x2, 0x2, 0x1) write(r4, &(0x7f0000000c40)='1', 0x1) 4.993496076s ago: executing program 1 (id=412): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x200, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0x1, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0xc62d71, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x4000], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0x4, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x2, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x8, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r4, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004894}, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0xc1, 0x0, 0x57, 0xff}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.076666874s ago: executing program 0 (id=413): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000002640)=""/4080, 0xff0}, {&(0x7f00000003c0)=""/142, 0x8e}, {&(0x7f0000000880)=""/167, 0xa7}, {&(0x7f0000000bc0)=""/180, 0xb4}, {&(0x7f0000000040)=""/18, 0x12}], 0x6}, 0x1}], 0x3, 0x100, 0x0) 3.503472292s ago: executing program 1 (id=414): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, 0x0, 0x0) unshare(0x6a060000) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x5) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x400000b0, 0x0, 0x5}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo/3\x00') read$FUSE(r6, &(0x7f0000000580)={0x2020}, 0x2020) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect(0x0, 0x36, &(0x7f0000002600)=ANY=[@ANYBLOB="120100033ca7ff1063110001bb23010203010902240001040e10830904560b02e80ef9060905030300047f580609058b03"], &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_int(r7, 0x29, 0x4b, 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f0000002680)={0x7, 0x0, [{0x80000000, 0x3, 0x4da1e89fc77a7b65, 0xfffffffc, 0x1, 0x1501, 0x6}, {0x40000001, 0x5, 0x0, 0x8, 0x3, 0x5, 0x101}, {0x40000001, 0x8, 0x4, 0x401, 0x5, 0x62d, 0x80000000}, {0xc0000001, 0x0, 0x1, 0x7ff, 0x3b8, 0x2, 0x5}, {0x1, 0x8, 0x5, 0x14, 0x2d3, 0x0, 0x27e}, {0x40000001, 0x1, 0x1, 0x0, 0xc0, 0x2, 0xff}, {0x80000000, 0x6, 0x5, 0x5, 0x2, 0x20c00, 0x4}]}) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x41, &(0x7f00000027c0)=0x4, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000002880)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x80e0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000029c0)={0x58, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'vlan0\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 3.037298068s ago: executing program 0 (id=415): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000640), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000680), 0x2, 0x141102) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000080)={&(0x7f0000000040)=[{0x9, 0x0, 0x0, {0x2, 0xfffffff8, 0x2}}, {0x8, 0x2, 0x0, {0x80000000, 0x0, 0x2}}], 0x2, 0x20, 0x200, 0x5}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) read$FUSE(r2, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000002840)={0x2c, 0x0, 0xfffffffb}) writev(r1, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='wwnn=0x1000000044001123,wwpn=0x20000', 0x24) 2.502643273s ago: executing program 0 (id=416): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x200, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0x1, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0xc62d71, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x4000], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0x4, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x2, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x8, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x15, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r4, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4004894}, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0xc1, 0x0, 0x57, 0xff}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.00921367s ago: executing program 0 (id=417): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x200, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0x1, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0xc62d71, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x4000], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0x4, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x2, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x8, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x15, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r4, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004894}, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 1 (id=418): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) syz_open_dev$usbmon(0x0, 0x80000001, 0x28100) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0x0, 0x1}, @restrict={0xe, 0x0, 0x0, 0xb, 0x4}]}}, 0x0, 0x42, 0x0, 0x0, 0x3}, 0x28) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1}, 0xe) sendmmsg$inet_sctp(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x30}, {&(0x7f0000000340)=@in6={0xa, 0x4e23, 0xa8, @private0, 0x2}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000003c0)="e7e2f92fb585766089af8707efc85b76ff9adbeae4cec352e75f9856d80a4f3857f06a05ec249cdf4d438ec66dd60684086ec0867e788275847019e3", 0x3c}], 0x1, &(0x7f0000000500)=[@dstaddrv6={0x20, 0x84, 0x8, @empty}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x50, 0x1}], 0x2, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) recvmmsg$unix(r2, &(0x7f0000001a00), 0x0, 0x20, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r3, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') bind$x25(r3, &(0x7f0000000080), 0x12) connect$x25(r3, &(0x7f0000000600), 0x12) kernel console output (not intermixed with test programs): x1003 length: 249 > 9 [ 294.815206][ T5596] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 294.818827][ T5596] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 294.842409][ T5596] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 297.195412][ T5592] Bluetooth: hci6: command tx timeout [ 297.195795][ T5596] Bluetooth: hci5: command tx timeout [ 298.382058][ T1406] hsr_slave_0: left promiscuous mode [ 298.461648][ T1406] hsr_slave_1: left promiscuous mode [ 298.479241][ T1406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.520012][ T1406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.619149][ T1406] hsr_slave_0: left promiscuous mode [ 298.666559][ T1406] hsr_slave_1: left promiscuous mode [ 298.668073][ T1406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.719996][ T1406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.991341][ T1406] hsr_slave_0: left promiscuous mode [ 299.038734][ T1406] hsr_slave_1: left promiscuous mode [ 299.047043][ T1406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.047074][ T1406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.119579][ T1406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.119737][ T1406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.270661][ T5593] Bluetooth: hci5: command tx timeout [ 299.270702][ T5593] Bluetooth: hci6: command tx timeout [ 299.498889][ T1406] veth1_macvtap: left promiscuous mode [ 299.499001][ T1406] veth0_macvtap: left promiscuous mode [ 299.499272][ T1406] veth1_vlan: left promiscuous mode [ 299.499475][ T1406] veth0_vlan: left promiscuous mode [ 299.924284][ T6598] Bluetooth: hci0: unsupported parameter 255 [ 299.924310][ T6598] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 301.871840][ T5593] Bluetooth: hci5: command tx timeout [ 301.981921][ T5593] Bluetooth: hci6: command tx timeout [ 302.223374][ T1406] team0 (unregistering): Port device team_slave_1 removed [ 304.121012][ T5593] Bluetooth: hci6: command tx timeout [ 304.140466][ T1406] team0 (unregistering): Port device team_slave_0 removed [ 304.860557][ T1406] team0 (unregistering): Port device team_slave_1 removed [ 304.942256][ T1406] team0 (unregistering): Port device team_slave_0 removed [ 311.887277][ T6629] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 312.153260][ T5596] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 312.186807][ T5596] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 312.189504][ T5596] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 312.217873][ T5596] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 312.237602][ T5596] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 314.396129][ T5593] Bluetooth: hci2: command tx timeout [ 314.649018][ T1406] team0 (unregistering): Port device team_slave_1 removed [ 314.720684][ T1406] team0 (unregistering): Port device team_slave_0 removed [ 316.339281][ T5247] 8021q: adding VLAN 0 to HW filter on device eth6 [ 316.487338][ T5593] Bluetooth: hci2: command tx timeout [ 317.396429][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.166'. [ 318.559822][ T5593] Bluetooth: hci2: command tx timeout [ 320.486410][ T6671] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 320.629775][ T5593] Bluetooth: hci2: command tx timeout [ 321.662756][ T6687] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 324.176613][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.179363][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.673374][ T5247] 8021q: adding VLAN 0 to HW filter on device eth7 [ 328.816176][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.816288][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.816763][ T6548] bridge_slave_0: entered allmulticast mode [ 328.985605][ T6548] bridge_slave_0: entered promiscuous mode [ 329.061244][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.061391][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.061604][ T6548] bridge_slave_1: entered allmulticast mode [ 329.064635][ T6548] bridge_slave_1: entered promiscuous mode [ 329.354164][ T6548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.403404][ T6548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.502510][ T6534] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.505024][ T6534] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.505198][ T6534] bridge_slave_0: entered allmulticast mode [ 329.536267][ T6534] bridge_slave_0: entered promiscuous mode [ 329.670964][ T6534] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.671107][ T6534] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.671347][ T6534] bridge_slave_1: entered allmulticast mode [ 329.701125][ T6534] bridge_slave_1: entered promiscuous mode [ 329.944245][ T6548] team0: Port device team_slave_0 added [ 330.001475][ T6548] team0: Port device team_slave_1 added [ 330.016519][ T6534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.139332][ T6534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.311492][ T5318] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 332.323132][ T5318] usb 2-1: device descriptor read/all, error -71 [ 332.531298][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.531322][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.531350][ T6548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.629299][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.629320][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.629349][ T6548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.681214][ T6534] team0: Port device team_slave_0 added [ 332.706927][ T6534] team0: Port device team_slave_1 added [ 332.973665][ T6534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.973686][ T6534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.973716][ T6534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.551246][ T6534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.551266][ T6534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.551295][ T6534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.887482][ T6548] hsr_slave_0: entered promiscuous mode [ 333.902159][ T6548] hsr_slave_1: entered promiscuous mode [ 333.905373][ T6548] debugfs: 'hsr0' already exists in 'hsr' [ 333.905404][ T6548] Cannot create hsr debugfs directory [ 334.143676][ T5247] 8021q: adding VLAN 0 to HW filter on device eth8 [ 336.287981][ T6534] hsr_slave_0: entered promiscuous mode [ 336.298225][ T6534] hsr_slave_1: entered promiscuous mode [ 336.305092][ T6534] debugfs: 'hsr0' already exists in 'hsr' [ 336.305188][ T6534] Cannot create hsr debugfs directory [ 336.509475][ T6775] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 337.227810][ T1406] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.520090][ T6635] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.520188][ T6635] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.520345][ T6635] bridge_slave_0: entered allmulticast mode [ 337.522329][ T6635] bridge_slave_0: entered promiscuous mode [ 337.609804][ T6635] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.609942][ T6635] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.610143][ T6635] bridge_slave_1: entered allmulticast mode [ 337.651704][ T6635] bridge_slave_1: entered promiscuous mode [ 338.213390][ T1406] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.357297][ T6635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.474500][ T6635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.323119][ T6794] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 340.150968][ T6635] team0: Port device team_slave_0 added [ 340.786717][ T1406] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.808114][ T5590] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 340.940903][ T6635] team0: Port device team_slave_1 added [ 341.048412][ T5590] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 341.149073][ T5590] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 341.149096][ T5590] usb 2-1: config 0 has no interface number 0 [ 341.149518][ T5590] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 341.149539][ T5590] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 341.149559][ T5590] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 341.227280][ T5590] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 341.227315][ T5590] usb 2-1: Product: syz [ 341.227334][ T5590] usb 2-1: SerialNumber: syz [ 341.498059][ T5590] usb 2-1: config 0 descriptor?? [ 341.730473][ T5590] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 341.802991][ T5590] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input5 [ 342.266652][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 344.360397][ T1406] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.572284][ T6635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.572305][ T6635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.572335][ T6635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.794559][ T5318] usb 2-1: USB disconnect, device number 4 [ 345.092834][ T5318] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 345.169716][ T6635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.169736][ T6635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.169765][ T6635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.877087][ T6836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.352123][ T6635] hsr_slave_0: entered promiscuous mode [ 347.356115][ T6635] hsr_slave_1: entered promiscuous mode [ 347.375046][ T6635] debugfs: 'hsr0' already exists in 'hsr' [ 347.375078][ T6635] Cannot create hsr debugfs directory [ 349.619734][ T6548] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 349.724585][ T6548] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 349.823408][ T6548] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 349.960104][ T6548] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 350.345092][ T5596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 350.376111][ T5596] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 350.387935][ T5596] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 350.408058][ T5596] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 350.422828][ T5596] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 350.454742][ T6548] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 350.613283][ T6548] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 350.822674][ T5590] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 350.959104][ T6548] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 351.019323][ T6548] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 351.091659][ T5590] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 351.095474][ T5590] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 351.095496][ T5590] usb 1-1: config 0 has no interface number 0 [ 351.095528][ T5590] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 351.095547][ T5590] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 351.095566][ T5590] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 351.268544][ T5590] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 351.268569][ T5590] usb 1-1: Product: syz [ 351.268580][ T5590] usb 1-1: SerialNumber: syz [ 351.316730][ T5590] usb 1-1: config 0 descriptor?? [ 351.416155][ T5590] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 351.487894][ T5590] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input6 [ 352.633268][ T5596] Bluetooth: hci1: command tx timeout [ 352.665336][ T1406] bridge_slave_1: left allmulticast mode [ 352.665413][ T1406] bridge_slave_1: left promiscuous mode [ 352.665746][ T1406] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.870644][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 352.870936][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 352.871200][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 352.871806][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 352.872053][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 352.872169][ T5590] usb 1-1: USB disconnect, device number 2 [ 352.875631][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 352.875652][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 353.073270][ T1406] bridge_slave_0: left allmulticast mode [ 353.073301][ T1406] bridge_slave_0: left promiscuous mode [ 353.073530][ T1406] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.147979][ T5590] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 353.226842][ T5593] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 353.254117][ T5593] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 353.276331][ T5593] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 353.287359][ T5593] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 353.298461][ T5593] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 353.680207][ T1406] bridge_slave_1: left allmulticast mode [ 353.680247][ T1406] bridge_slave_1: left promiscuous mode [ 353.680591][ T1406] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.841313][ T1406] bridge_slave_0: left allmulticast mode [ 353.841368][ T1406] bridge_slave_0: left promiscuous mode [ 353.850162][ T1406] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.110168][ T1406] bridge_slave_1: left allmulticast mode [ 354.110208][ T1406] bridge_slave_1: left promiscuous mode [ 354.110481][ T1406] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.179856][ T5590] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 354.211170][ T1406] bridge_slave_0: left allmulticast mode [ 354.211200][ T1406] bridge_slave_0: left promiscuous mode [ 354.211423][ T1406] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.331940][ T5590] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 354.333229][ T5590] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 354.333257][ T5590] usb 2-1: config 0 has no interface number 0 [ 354.333301][ T5590] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 354.333321][ T5590] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 354.333340][ T5590] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 354.336338][ T5590] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 354.336358][ T5590] usb 2-1: Product: syz [ 354.336369][ T5590] usb 2-1: SerialNumber: syz [ 354.378215][ T5590] usb 2-1: config 0 descriptor?? [ 354.453371][ T5590] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 354.473662][ T5590] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input7 [ 354.731371][ T5596] Bluetooth: hci1: command tx timeout [ 355.381472][ T1406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.430004][ T5596] Bluetooth: hci3: command tx timeout [ 355.446404][ T1406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.491906][ T1406] bond0 (unregistering): Released all slaves [ 355.772310][ T1406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.860698][ T1406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.922326][ T1406] bond0 (unregistering): Released all slaves [ 356.258957][ T1406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.330673][ T1406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.403354][ T1406] bond0 (unregistering): Released all slaves [ 356.450657][ T6548] kthread_run failed with err -4 [ 356.747033][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 356.747389][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 356.749926][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 356.757593][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 356.794417][ T5596] Bluetooth: hci1: command tx timeout [ 356.829131][ T5318] usb 2-1: USB disconnect, device number 5 [ 356.829301][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 357.067703][ T5318] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 357.416309][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.189'. [ 357.501650][ T6879] netlink: 44 bytes leftover after parsing attributes in process `syz.0.189'. [ 357.510579][ T5596] Bluetooth: hci3: command tx timeout [ 358.869757][ T5596] Bluetooth: hci1: command tx timeout [ 361.293184][ T5596] Bluetooth: hci3: command tx timeout [ 363.073634][ T6897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.192'. [ 363.154963][ T6898] netlink: 44 bytes leftover after parsing attributes in process `syz.0.192'. [ 363.349834][ T5596] Bluetooth: hci3: command tx timeout [ 364.982787][ T5318] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 365.152545][ T5318] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 365.154092][ T5318] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 365.154119][ T5318] usb 2-1: config 0 has no interface number 0 [ 365.154167][ T5318] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 365.154195][ T5318] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 365.154222][ T5318] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 365.157303][ T5318] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 365.157330][ T5318] usb 2-1: Product: syz [ 365.157347][ T5318] usb 2-1: SerialNumber: syz [ 365.282710][ T5318] usb 2-1: config 0 descriptor?? [ 365.308689][ T5318] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 365.328766][ T5318] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input8 [ 365.384729][ T1406] hsr_slave_0: left promiscuous mode [ 365.441666][ T1406] hsr_slave_1: left promiscuous mode [ 365.445672][ T1406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.445703][ T1406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.578373][ T1406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.578472][ T1406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.686023][ T1406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.743654][ T1406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.830497][ T1406] veth1_macvtap: left promiscuous mode [ 365.830614][ T1406] veth0_macvtap: left promiscuous mode [ 365.830889][ T1406] veth1_vlan: left promiscuous mode [ 365.838664][ T1406] veth0_vlan: left promiscuous mode [ 365.863566][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 366.085401][ T5693] usb 2-1: USB disconnect, device number 6 [ 366.147367][ T5693] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 366.430631][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 366.583358][ T9] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 366.584583][ T9] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 366.584611][ T9] usb 1-1: config 0 has no interface number 0 [ 366.584655][ T9] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 366.584675][ T9] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 366.584695][ T9] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 366.586518][ T9] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 366.586547][ T9] usb 1-1: Product: syz [ 366.586563][ T9] usb 1-1: SerialNumber: syz [ 366.682918][ T9] usb 1-1: config 0 descriptor?? [ 366.702249][ T9] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 366.728715][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input9 [ 367.045035][ T1406] team0 (unregistering): Port device team_slave_1 removed [ 367.121347][ T1406] team0 (unregistering): Port device team_slave_0 removed [ 367.124931][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 367.363026][ T1406] team0 (unregistering): Port device team_slave_1 removed [ 367.440598][ T1406] team0 (unregistering): Port device team_slave_0 removed [ 367.843218][ T1406] team0 (unregistering): Port device team_slave_1 removed [ 367.902278][ T1406] team0 (unregistering): Port device team_slave_0 removed [ 368.378827][ T5247] 8021q: adding VLAN 0 to HW filter on device eth9 [ 368.386987][ C0] cm109_urb_ctl_callback: 194 callbacks suppressed [ 368.387016][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 368.387256][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 368.387482][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 368.387703][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 368.387936][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 368.388170][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 368.388424][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 368.388674][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 368.388899][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 368.389121][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 368.476677][ T5693] usb 1-1: USB disconnect, device number 3 [ 368.476881][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 368.639113][ T5693] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 368.853225][ T6635] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 369.438091][ T6935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.198'. [ 369.488757][ T6936] netlink: 44 bytes leftover after parsing attributes in process `syz.1.198'. [ 371.657254][ T6635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 372.536166][ T6635] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 372.641443][ T6635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 373.068306][ T5593] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 373.126289][ T5593] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 373.162404][ T5593] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 373.169449][ T5593] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 373.191042][ T5593] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 374.391830][ T11] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 374.540033][ T6846] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.540180][ T6846] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.540391][ T6846] bridge_slave_0: entered allmulticast mode [ 374.543547][ T6846] bridge_slave_0: entered promiscuous mode [ 374.583446][ T11] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 374.585022][ T11] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 374.585049][ T11] usb 2-1: config 0 has no interface number 0 [ 374.585096][ T11] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 374.585130][ T11] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 374.585157][ T11] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 374.588218][ T11] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 374.588246][ T11] usb 2-1: Product: syz [ 374.588263][ T11] usb 2-1: SerialNumber: syz [ 374.588815][ T6846] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.588942][ T6846] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.589150][ T6846] bridge_slave_1: entered allmulticast mode [ 374.689253][ T6846] bridge_slave_1: entered promiscuous mode [ 374.847486][ T11] usb 2-1: config 0 descriptor?? [ 374.897327][ T11] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 374.932752][ T11] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input10 [ 375.361013][ T5593] Bluetooth: hci5: command tx timeout [ 375.446377][ C0] cm109_urb_ctl_callback: 348 callbacks suppressed [ 375.446403][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 375.446644][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 375.446877][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 375.447112][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 375.447341][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 375.447586][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 375.451896][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 375.452133][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 375.452366][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 375.452603][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 375.582544][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 375.610187][ T32] usb 2-1: USB disconnect, device number 7 [ 375.693175][ T6846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.760567][ T32] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 375.841450][ T5247] 8021q: adding VLAN 0 to HW filter on device eth10 [ 375.893114][ T6846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.386808][ T6846] team0: Port device team_slave_0 added [ 376.413697][ T6860] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.413854][ T6860] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.413980][ T6860] bridge_slave_0: entered allmulticast mode [ 376.421013][ T6860] bridge_slave_0: entered promiscuous mode [ 376.461306][ T6846] team0: Port device team_slave_1 added [ 376.488258][ T6860] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.488435][ T6860] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.488639][ T6860] bridge_slave_1: entered allmulticast mode [ 376.516405][ T6860] bridge_slave_1: entered promiscuous mode [ 378.443900][ T5593] Bluetooth: hci5: command tx timeout [ 379.233680][ T6846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.233702][ T6846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.233747][ T6846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.328469][ T6860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.334058][ T6846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.343100][ T6846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.343194][ T6846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.632255][ T6860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.821578][ T37] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 380.031698][ T7030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.209'. [ 380.102859][ T7032] netlink: 44 bytes leftover after parsing attributes in process `syz.0.209'. [ 380.207135][ T37] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 380.274732][ T37] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 380.274765][ T37] usb 2-1: config 0 has no interface number 0 [ 380.296647][ T37] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 380.296713][ T37] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 380.296872][ T37] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 380.480969][ T5593] Bluetooth: hci5: command tx timeout [ 380.656668][ T37] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 380.656702][ T37] usb 2-1: Product: syz [ 380.656768][ T37] usb 2-1: SerialNumber: syz [ 381.517588][ T37] usb 2-1: config 0 descriptor?? [ 381.821129][ T6860] team0: Port device team_slave_0 added [ 381.980176][ T37] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 382.017513][ T37] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input11 [ 382.137869][ T6860] team0: Port device team_slave_1 added [ 382.223585][ T6846] hsr_slave_0: entered promiscuous mode [ 382.227339][ T6846] hsr_slave_1: entered promiscuous mode [ 382.245189][ T6846] debugfs: 'hsr0' already exists in 'hsr' [ 382.245225][ T6846] Cannot create hsr debugfs directory [ 382.250016][ T5767] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 382.272385][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 382.378225][ T6860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.378240][ T6860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.378259][ T6860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.433026][ T5767] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 382.461689][ T5767] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.461723][ T5767] usb 1-1: Product: syz [ 382.461740][ T5767] usb 1-1: Manufacturer: syz [ 382.461756][ T5767] usb 1-1: SerialNumber: syz [ 382.511616][ T6860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.511636][ T6860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.511664][ T6860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.549836][ T5596] Bluetooth: hci5: command tx timeout [ 382.603065][ C0] cm109_urb_ctl_callback: 464 callbacks suppressed [ 382.603095][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 382.603349][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 382.603591][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 382.603837][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 382.603860][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 382.603870][ T37] usb 2-1: USB disconnect, device number 8 [ 382.853243][ T37] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 383.272567][ T5767] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 383.272651][ T5767] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 383.304694][ T5767] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 383.304781][ T5767] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 383.308533][ T5767] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 383.410672][ T5767] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 383.484320][ T5767] usb 1-1: USB disconnect, device number 4 [ 384.037912][ T6860] hsr_slave_0: entered promiscuous mode [ 384.050346][ T6860] hsr_slave_1: entered promiscuous mode [ 384.055111][ T6860] debugfs: 'hsr0' already exists in 'hsr' [ 384.055140][ T6860] Cannot create hsr debugfs directory [ 385.658015][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.658092][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.153848][ T7079] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 388.150490][ T6954] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.150639][ T6954] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.150841][ T6954] bridge_slave_0: entered allmulticast mode [ 388.153924][ T6954] bridge_slave_0: entered promiscuous mode [ 388.254820][ T6954] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.254918][ T6954] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.259510][ T6954] bridge_slave_1: entered allmulticast mode [ 388.322295][ T6954] bridge_slave_1: entered promiscuous mode [ 389.455793][ T6954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.546433][ T6954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.003215][ T5247] 8021q: adding VLAN 0 to HW filter on device eth11 [ 390.256883][ T6954] team0: Port device team_slave_0 added [ 390.313072][ T6954] team0: Port device team_slave_1 added [ 390.851208][ T6954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.851228][ T6954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.851257][ T6954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.953809][ T6954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.953829][ T6954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.953859][ T6954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.341129][ T6954] hsr_slave_0: entered promiscuous mode [ 391.360088][ T6954] hsr_slave_1: entered promiscuous mode [ 391.361091][ T6954] debugfs: 'hsr0' already exists in 'hsr' [ 391.361119][ T6954] Cannot create hsr debugfs directory [ 394.483384][ T37] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 394.652152][ T37] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 394.654531][ T37] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 394.654557][ T37] usb 2-1: config 0 has no interface number 0 [ 394.654704][ T37] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 394.654732][ T37] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 394.654756][ T37] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 394.744290][ T37] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 394.744312][ T37] usb 2-1: Product: syz [ 394.744323][ T37] usb 2-1: SerialNumber: syz [ 394.780441][ T37] usb 2-1: config 0 descriptor?? [ 394.809949][ T37] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 394.854730][ T37] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input12 [ 395.431062][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 395.875011][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 395.875279][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 395.877433][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 395.877695][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 395.877975][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 395.878242][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 395.878504][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 395.878766][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 395.879019][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 395.879266][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 396.025853][ T5318] usb 2-1: USB disconnect, device number 9 [ 396.025947][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 396.128127][ T5318] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 399.404426][ T7186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.224'. [ 399.495831][ T7185] netlink: 44 bytes leftover after parsing attributes in process `syz.1.224'. [ 401.043795][ T5247] 8021q: adding VLAN 0 to HW filter on device eth12 [ 401.543720][ T1406] bridge_slave_1: left allmulticast mode [ 401.543762][ T1406] bridge_slave_1: left promiscuous mode [ 401.544057][ T1406] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.762799][ T1406] bridge_slave_0: left allmulticast mode [ 401.762830][ T1406] bridge_slave_0: left promiscuous mode [ 401.763033][ T1406] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.162201][ T1406] bridge_slave_1: left allmulticast mode [ 402.162245][ T1406] bridge_slave_1: left promiscuous mode [ 402.162557][ T1406] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.348405][ T1406] bridge_slave_0: left allmulticast mode [ 402.348438][ T1406] bridge_slave_0: left promiscuous mode [ 402.348634][ T1406] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.899935][ T1406] bridge_slave_1: left allmulticast mode [ 403.899974][ T1406] bridge_slave_1: left promiscuous mode [ 403.900206][ T1406] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.033396][ T1406] bridge_slave_0: left allmulticast mode [ 404.033437][ T1406] bridge_slave_0: left promiscuous mode [ 404.033707][ T1406] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.659777][ T5767] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 406.813130][ T5767] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 406.814634][ T5767] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 406.814663][ T5767] usb 1-1: config 0 has no interface number 0 [ 406.814708][ T5767] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 406.814736][ T5767] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 406.814755][ T5767] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 406.816569][ T5767] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 406.816595][ T5767] usb 1-1: Product: syz [ 406.816610][ T5767] usb 1-1: SerialNumber: syz [ 406.897763][ T5767] usb 1-1: config 0 descriptor?? [ 406.954155][ T5767] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 407.016914][ T5767] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input13 [ 407.436401][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 407.471188][ T1406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.606364][ T1406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.694540][ T1406] bond0 (unregistering): Released all slaves [ 407.827297][ C0] cm109_urb_ctl_callback: 619 callbacks suppressed [ 407.827335][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 407.827613][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 407.827871][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 407.828123][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 407.828426][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 407.828691][ T37] usb 1-1: USB disconnect, device number 5 [ 407.828690][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 407.828717][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 407.975664][ T37] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 408.371076][ T1406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.490530][ T1406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.578551][ T1406] bond0 (unregistering): Released all slaves [ 409.152002][ T1406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.270779][ T1406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.358631][ T1406] bond0 (unregistering): Released all slaves [ 409.829727][ T5767] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 410.040627][ T5767] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 410.043808][ T5767] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 410.043838][ T5767] usb 2-1: config 0 has no interface number 0 [ 410.043886][ T5767] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 410.043917][ T5767] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 410.043946][ T5767] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 410.046217][ T5767] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 410.046273][ T5767] usb 2-1: Product: syz [ 410.046291][ T5767] usb 2-1: SerialNumber: syz [ 410.059736][ T5590] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 410.147663][ T5767] usb 2-1: config 0 descriptor?? [ 410.193311][ T5767] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 410.196619][ T5767] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input14 [ 410.217513][ T5590] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 410.219053][ T5590] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 410.219080][ T5590] usb 1-1: config 0 has no interface number 0 [ 410.219129][ T5590] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 410.219164][ T5590] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 410.219193][ T5590] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 410.278418][ T5590] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 410.278448][ T5590] usb 1-1: Product: syz [ 410.278463][ T5590] usb 1-1: SerialNumber: syz [ 410.316356][ T5590] usb 1-1: config 0 descriptor?? [ 410.356683][ T5590] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 410.399309][ T5590] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input15 [ 411.154367][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 411.154630][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 411.154866][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 411.155100][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 411.288883][ T5590] usb 2-1: USB disconnect, device number 10 [ 411.289142][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 411.450011][ T5767] usb 1-1: USB disconnect, device number 6 [ 411.450094][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 411.497264][ T5590] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 411.611264][ T5767] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 411.621743][ T1406] hsr_slave_0: left promiscuous mode [ 411.662740][ T1406] hsr_slave_1: left promiscuous mode [ 411.680395][ T1406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.768156][ T1406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.868798][ T5593] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 411.924252][ T5593] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 411.948873][ T5593] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 411.979298][ T5593] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 411.984518][ T5593] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 412.124422][ T1406] hsr_slave_0: left promiscuous mode [ 412.161270][ T1406] hsr_slave_1: left promiscuous mode [ 412.164146][ T1406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.184907][ T1406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.359829][ T1406] hsr_slave_0: left promiscuous mode [ 412.399741][ T1406] hsr_slave_1: left promiscuous mode [ 412.400851][ T1406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.440722][ T1406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.860407][ T1406] team0 (unregistering): Port device team_slave_1 removed [ 412.910348][ T1406] team0 (unregistering): Port device team_slave_0 removed [ 413.457413][ T5593] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 413.487860][ T5593] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 413.489292][ T5593] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 413.515300][ T5593] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 413.516107][ T5593] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 413.576831][ T1406] team0 (unregistering): Port device team_slave_1 removed [ 413.650405][ T1406] team0 (unregistering): Port device team_slave_0 removed [ 414.149985][ T5596] Bluetooth: hci2: command tx timeout [ 414.165902][ T1406] team0 (unregistering): Port device team_slave_1 removed [ 414.210406][ T1406] team0 (unregistering): Port device team_slave_0 removed [ 415.905609][ T5596] Bluetooth: hci6: command tx timeout [ 416.229815][ T5596] Bluetooth: hci2: command tx timeout [ 418.882096][ T5596] Bluetooth: hci6: command tx timeout [ 418.882160][ T5596] Bluetooth: hci2: command tx timeout [ 420.681815][ T6846] netdevsim netdevsim5: probe with driver netdevsim failed with error -12 [ 420.950052][ T5593] Bluetooth: hci2: command tx timeout [ 420.950089][ T5593] Bluetooth: hci6: command tx timeout [ 421.067536][ T5247] 8021q: adding VLAN 0 to HW filter on device eth13 [ 421.618040][ T7305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.241'. [ 421.750070][ T7306] netlink: 44 bytes leftover after parsing attributes in process `syz.0.241'. [ 423.046734][ T5596] Bluetooth: hci6: command tx timeout [ 427.326273][ T7334] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 429.780254][ T1406] bridge_slave_1: left allmulticast mode [ 429.780297][ T1406] bridge_slave_1: left promiscuous mode [ 429.780493][ T1406] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.112311][ T1406] bridge_slave_0: left allmulticast mode [ 430.112343][ T1406] bridge_slave_0: left promiscuous mode [ 430.112598][ T1406] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.626643][ T1406] bridge_slave_1: left allmulticast mode [ 431.626672][ T1406] bridge_slave_1: left promiscuous mode [ 431.626867][ T1406] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.817819][ T1406] bridge_slave_0: left allmulticast mode [ 431.817851][ T1406] bridge_slave_0: left promiscuous mode [ 431.818041][ T1406] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.131180][ T1406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.273294][ T1406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.480408][ T1406] bond0 (unregistering): Released all slaves [ 433.538845][ T5593] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 433.571658][ T5593] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 433.616602][ T5593] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 433.667939][ T5593] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 433.682711][ T5593] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 435.909862][ T5596] Bluetooth: hci1: command tx timeout [ 436.020430][ T1406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.140663][ T1406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.202009][ T1406] bond0 (unregistering): Released all slaves [ 436.575366][ T7247] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.575498][ T7247] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.575720][ T7247] bridge_slave_0: entered allmulticast mode [ 436.580265][ T7247] bridge_slave_0: entered promiscuous mode [ 436.784762][ T7247] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.784875][ T7247] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.785038][ T7247] bridge_slave_1: entered allmulticast mode [ 436.787161][ T7247] bridge_slave_1: entered promiscuous mode [ 437.223497][ T7252] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.223660][ T7252] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.223899][ T7252] bridge_slave_0: entered allmulticast mode [ 437.229123][ T7252] bridge_slave_0: entered promiscuous mode [ 437.284745][ T7247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.304234][ T7252] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.304335][ T7252] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.304492][ T7252] bridge_slave_1: entered allmulticast mode [ 437.339989][ T7252] bridge_slave_1: entered promiscuous mode [ 437.371330][ T7247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.875081][ T7252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.897356][ T7247] team0: Port device team_slave_0 added [ 437.919791][ T7252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.989793][ T5596] Bluetooth: hci1: command tx timeout [ 438.135157][ T1406] hsr_slave_0: left promiscuous mode [ 438.223695][ T1406] hsr_slave_1: left promiscuous mode [ 438.224653][ T1406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.492181][ T1406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.869746][ T1406] hsr_slave_0: left promiscuous mode [ 439.912496][ T1406] hsr_slave_1: left promiscuous mode [ 439.913830][ T1406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.069735][ T5596] Bluetooth: hci1: command tx timeout [ 440.169435][ T1406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.335549][ T7418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.456651][ T5596] Bluetooth: hci1: command tx timeout [ 444.585960][ T7433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.261'. [ 444.653471][ T7434] netlink: 44 bytes leftover after parsing attributes in process `syz.0.261'. [ 444.923798][ T1406] team0 (unregistering): Port device team_slave_1 removed [ 445.714342][ T1406] team0 (unregistering): Port device team_slave_0 removed [ 446.631883][ T1406] team0 (unregistering): Port device team_slave_1 removed [ 446.690653][ T1406] team0 (unregistering): Port device team_slave_0 removed [ 447.033922][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 447.033999][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.034068][ T1417] kworker/u8:11 (1417) used greatest stack depth: 19088 bytes left [ 447.183395][ T7247] team0: Port device team_slave_1 added [ 447.909106][ T7252] team0: Port device team_slave_0 added [ 447.917939][ T7247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.917957][ T7247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.917985][ T7247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.075283][ T7445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.862910][ T7252] team0: Port device team_slave_1 added [ 448.941691][ T7247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.941711][ T7247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.941740][ T7247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.168729][ T7252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.168749][ T7252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.168787][ T7252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.276444][ T7252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.276464][ T7252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 449.276494][ T7252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.653780][ T7247] hsr_slave_0: entered promiscuous mode [ 449.655362][ T7247] hsr_slave_1: entered promiscuous mode [ 449.656434][ T7247] debugfs: 'hsr0' already exists in 'hsr' [ 449.656462][ T7247] Cannot create hsr debugfs directory [ 449.716822][ T5693] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 450.762521][ T5693] usb 2-1: Using ep0 maxpacket: 16 [ 450.776504][ T5693] usb 2-1: unable to get BOS descriptor or descriptor too short [ 450.776568][ T5693] usb 2-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=23.bb [ 450.779399][ T5693] usb 2-1: config 4 has an invalid interface number: 86 but max is 0 [ 450.779429][ T5693] usb 2-1: config 4 has no interface number 0 [ 450.779478][ T5693] usb 2-1: config 4 interface 86 altsetting 11 endpoint 0x3 has an invalid bInterval 127, changing to 10 [ 450.779509][ T5693] usb 2-1: config 4 interface 86 altsetting 11 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 450.779851][ T5693] usb 2-1: config 4 interface 86 altsetting 11 endpoint 0x8B has invalid wMaxPacketSize 0 [ 450.779925][ T5693] usb 2-1: config 4 interface 86 has no altsetting 0 [ 450.783324][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.783353][ T5693] usb 2-1: Product: syz [ 450.783370][ T5693] usb 2-1: Manufacturer: syz [ 450.783386][ T5693] usb 2-1: SerialNumber: syz [ 451.517683][ T7252] hsr_slave_0: entered promiscuous mode [ 451.520826][ T7252] hsr_slave_1: entered promiscuous mode [ 451.523545][ T7252] debugfs: 'hsr0' already exists in 'hsr' [ 451.523637][ T7252] Cannot create hsr debugfs directory [ 451.621237][ T5767] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 451.779832][ T5767] usb 1-1: Using ep0 maxpacket: 16 [ 451.783848][ T5767] usb 1-1: unable to get BOS descriptor or descriptor too short [ 451.783911][ T5767] usb 1-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=23.bb [ 451.789140][ T5767] usb 1-1: config 4 has an invalid interface number: 86 but max is 0 [ 451.789172][ T5767] usb 1-1: config 4 has no interface number 0 [ 451.789221][ T5767] usb 1-1: config 4 interface 86 altsetting 11 endpoint 0x3 has an invalid bInterval 127, changing to 10 [ 451.789254][ T5767] usb 1-1: config 4 interface 86 altsetting 11 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 451.789283][ T5767] usb 1-1: config 4 interface 86 altsetting 11 endpoint 0x8B has invalid wMaxPacketSize 0 [ 451.789309][ T5767] usb 1-1: config 4 interface 86 has no altsetting 0 [ 451.843936][ T5767] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.843966][ T5767] usb 1-1: Product: syz [ 451.843983][ T5767] usb 1-1: Manufacturer: syz [ 451.844000][ T5767] usb 1-1: SerialNumber: syz [ 453.981630][ T5767] cypress_m8 1-1:4.86: DeLorme Earthmate USB converter detected [ 454.093166][ T1406] bridge_slave_1: left allmulticast mode [ 454.093273][ T1406] bridge_slave_1: left promiscuous mode [ 454.093873][ T1406] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.150778][ T5767] usb 1-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 454.182506][ T5767] usb 1-1: USB disconnect, device number 7 [ 454.228205][ T5767] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 454.252847][ T1406] bridge_slave_0: left allmulticast mode [ 454.252894][ T1406] bridge_slave_0: left promiscuous mode [ 454.253272][ T1406] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.254608][ T5767] cypress_m8 1-1:4.86: device disconnected [ 454.880727][ T1406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.960850][ T1406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.023254][ T1406] bond0 (unregistering): Released all slaves [ 455.453546][ T5693] cypress_m8 2-1:4.86: DeLorme Earthmate USB converter detected [ 455.527874][ T5693] usb 2-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 455.566163][ T5693] usb 2-1: USB disconnect, device number 11 [ 455.587394][ T5693] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 455.588244][ T5693] cypress_m8 2-1:4.86: device disconnected [ 455.981280][ T1406] hsr_slave_0: left promiscuous mode [ 455.999839][ T1406] hsr_slave_1: left promiscuous mode [ 456.001004][ T1406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.041406][ T1406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.119761][ T5693] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 456.270595][ T5693] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 456.275766][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.275788][ T5693] usb 1-1: Product: syz [ 456.275799][ T5693] usb 1-1: Manufacturer: syz [ 456.275810][ T5693] usb 1-1: SerialNumber: syz [ 456.640984][ T1406] team0 (unregistering): Port device team_slave_1 removed [ 456.721163][ T1406] team0 (unregistering): Port device team_slave_0 removed [ 456.760991][ T5693] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 456.761060][ T5693] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 456.761422][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 456.761577][ T5693] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 456.761632][ T5693] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 456.824416][ T5693] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 456.853335][ T5693] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 456.882122][ T5693] usb 1-1: USB disconnect, device number 8 [ 457.735797][ T7247] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 457.868337][ T7247] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 457.935289][ T7247] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 457.994711][ T7247] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 457.996264][ T7379] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.996444][ T7379] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.996858][ T7379] bridge_slave_0: entered allmulticast mode [ 458.016289][ T7379] bridge_slave_0: entered promiscuous mode [ 458.047441][ T7247] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 458.128460][ T7247] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 458.152699][ T7379] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.152835][ T7379] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.153042][ T7379] bridge_slave_1: entered allmulticast mode [ 458.156975][ T7379] bridge_slave_1: entered promiscuous mode [ 458.259829][ T7247] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 458.356204][ T7247] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 458.692467][ T7379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.714337][ T7379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.226473][ T7379] team0: Port device team_slave_0 added [ 460.412831][ T7379] team0: Port device team_slave_1 added [ 460.537122][ T7531] syz.0.277 uses obsolete (PF_INET,SOCK_PACKET) [ 460.729801][ T5767] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 460.733061][ T7252] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 460.816125][ T7252] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 460.830796][ T7379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.830816][ T7379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.830845][ T7379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.832304][ T7252] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 460.953292][ T5767] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 460.956474][ T5767] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 460.956506][ T5767] usb 2-1: config 0 has no interface number 0 [ 460.956553][ T5767] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 460.956582][ T5767] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 461.009677][ T5767] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 461.009712][ T5767] usb 2-1: Product: syz [ 461.009730][ T5767] usb 2-1: SerialNumber: syz [ 461.011678][ T7252] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 461.050985][ T5767] usb 2-1: config 0 descriptor?? [ 461.094260][ T5767] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 461.096740][ T7379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.096760][ T7379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.096789][ T7379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.119451][ T7252] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 461.204901][ T7252] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 461.226507][ T7252] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 461.278864][ T7252] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 461.586209][ T7379] hsr_slave_0: entered promiscuous mode [ 461.596470][ T7379] hsr_slave_1: entered promiscuous mode [ 461.597954][ T7379] debugfs: 'hsr0' already exists in 'hsr' [ 461.597983][ T7379] Cannot create hsr debugfs directory [ 462.878529][ T7247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.093266][ T7247] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.126942][ T7252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.324057][ T766] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.325872][ T766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.417326][ T766] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.417495][ T766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.551521][ T5318] usb 2-1: USB disconnect, device number 12 [ 463.815530][ T7252] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.029025][ T1406] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.031335][ T1406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.181517][ T1406] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.181647][ T1406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.387643][ T7379] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 464.557454][ T7379] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 464.592341][ T7379] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 464.724399][ T7379] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 464.756896][ T7379] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 464.800968][ T7379] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 464.840744][ T7379] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 465.039228][ T7379] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 466.191808][ T7379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.432788][ T7379] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.524436][ T2156] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.524535][ T2156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.620771][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.622490][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.175629][ T5318] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 467.324266][ T5318] usb 1-1: Using ep0 maxpacket: 16 [ 467.337354][ T5318] usb 1-1: unable to get BOS descriptor or descriptor too short [ 467.337398][ T5318] usb 1-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=23.bb [ 467.362788][ T5318] usb 1-1: config 4 has an invalid interface number: 86 but max is 0 [ 467.362823][ T5318] usb 1-1: config 4 has no interface number 0 [ 467.362873][ T5318] usb 1-1: config 4 interface 86 altsetting 11 endpoint 0x3 has an invalid bInterval 127, changing to 10 [ 467.362904][ T5318] usb 1-1: config 4 interface 86 altsetting 11 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 467.362932][ T5318] usb 1-1: config 4 interface 86 altsetting 11 endpoint 0x8B has invalid wMaxPacketSize 0 [ 467.362956][ T5318] usb 1-1: config 4 interface 86 has no altsetting 0 [ 467.444052][ T5318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.444085][ T5318] usb 1-1: Product: syz [ 467.444101][ T5318] usb 1-1: Manufacturer: syz [ 467.444117][ T5318] usb 1-1: SerialNumber: syz [ 471.262150][ T7252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.356241][ T5593] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 472.435379][ T5593] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 472.456423][ T5593] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 472.562586][ T5593] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 472.575420][ T5593] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 472.753766][ T5318] cypress_m8 1-1:4.86: DeLorme Earthmate USB converter detected [ 473.182505][ T5318] usb 1-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 475.032172][ T5596] Bluetooth: hci3: command tx timeout [ 476.865338][ T5593] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 476.935176][ T5593] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 476.939306][ T5593] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 476.983326][ T5593] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 476.997423][ T5593] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 477.111153][ T5593] Bluetooth: hci3: command tx timeout [ 477.802908][ T5719] usb 1-1: USB disconnect, device number 9 [ 477.890136][ T5719] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 477.891006][ T5719] cypress_m8 1-1:4.86: device disconnected [ 477.950266][ T7379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.381004][ T5596] Bluetooth: hci2: command tx timeout [ 479.436413][ T5596] Bluetooth: hci3: command tx timeout [ 481.429790][ T5596] Bluetooth: hci2: command tx timeout [ 481.510162][ T5596] Bluetooth: hci3: command tx timeout [ 483.528236][ T5596] Bluetooth: hci2: command tx timeout [ 484.670223][ T6081] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 484.822997][ T6081] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 484.837286][ T6081] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 484.837363][ T6081] usb 2-1: config 0 has no interface number 0 [ 484.837483][ T6081] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 484.837557][ T6081] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 484.837595][ T6081] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 484.867922][ T6081] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 484.868005][ T6081] usb 2-1: Product: syz [ 484.868047][ T6081] usb 2-1: SerialNumber: syz [ 484.969726][ T6081] usb 2-1: config 0 descriptor?? [ 485.316454][ T6081] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 485.346851][ T6081] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input16 [ 486.562619][ T5596] Bluetooth: hci2: command tx timeout [ 486.614424][ C1] cm109_urb_ctl_callback: 663 callbacks suppressed [ 486.614455][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 486.616818][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 486.617064][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 486.617310][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 486.617541][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 486.617776][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 486.618030][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 486.618264][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 486.618500][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 486.618744][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 486.794438][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 486.794513][ T6081] usb 2-1: USB disconnect, device number 13 [ 487.386514][ T6081] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 489.523961][ T7379] veth0_vlan: entered promiscuous mode [ 489.670354][ T1447] bridge_slave_1: left allmulticast mode [ 489.670397][ T1447] bridge_slave_1: left promiscuous mode [ 489.670719][ T1447] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.832747][ T1447] bridge_slave_0: left allmulticast mode [ 489.832778][ T1447] bridge_slave_0: left promiscuous mode [ 489.833015][ T1447] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.542708][ T1447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.600630][ T1447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.629472][ T1447] bond0 (unregistering): Released all slaves [ 491.846043][ T7639] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.846388][ T7639] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.846596][ T7639] bridge_slave_0: entered allmulticast mode [ 491.849449][ T7639] bridge_slave_0: entered promiscuous mode [ 491.886930][ T7379] veth1_vlan: entered promiscuous mode [ 491.901350][ T7639] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.901513][ T7639] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.901712][ T7639] bridge_slave_1: entered allmulticast mode [ 491.904195][ T7639] bridge_slave_1: entered promiscuous mode [ 492.198658][ T7639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.280927][ T7639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.671283][ T1447] hsr_slave_0: left promiscuous mode [ 492.715831][ T1447] hsr_slave_1: left promiscuous mode [ 492.748962][ T1447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.787007][ T1447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.755935][ T7814] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 494.211950][ T5593] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 494.261649][ T5593] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 494.283698][ T5593] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 494.302277][ T5593] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 494.321434][ T5593] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 494.715508][ T1447] team0 (unregistering): Port device team_slave_1 removed [ 494.832113][ T1447] team0 (unregistering): Port device team_slave_0 removed [ 495.752947][ T7639] team0: Port device team_slave_0 added [ 495.863945][ T7639] team0: Port device team_slave_1 added [ 496.421309][ T7675] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.421440][ T7675] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.421680][ T7675] bridge_slave_0: entered allmulticast mode [ 496.428142][ T7675] bridge_slave_0: entered promiscuous mode [ 496.477682][ T5596] Bluetooth: hci5: command tx timeout [ 496.506323][ T7639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.506348][ T7639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.506368][ T7639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.508994][ T7639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.509016][ T7639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.509045][ T7639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.648183][ T7675] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.648325][ T7675] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.648464][ T7675] bridge_slave_1: entered allmulticast mode [ 496.683546][ T7675] bridge_slave_1: entered promiscuous mode [ 496.959031][ T7675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.058764][ T7639] hsr_slave_0: entered promiscuous mode [ 497.065279][ T7639] hsr_slave_1: entered promiscuous mode [ 497.070801][ T7639] debugfs: 'hsr0' already exists in 'hsr' [ 497.070833][ T7639] Cannot create hsr debugfs directory [ 497.121708][ T7675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.549943][ T5596] Bluetooth: hci5: command tx timeout [ 500.108239][ T7675] team0: Port device team_slave_0 added [ 500.287114][ T7675] team0: Port device team_slave_1 added [ 500.639693][ T5596] Bluetooth: hci5: command tx timeout [ 500.768153][ T7675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.768175][ T7675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.768205][ T7675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.914506][ T7675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.914526][ T7675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.914556][ T7675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.546317][ T7873] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 502.715861][ T5596] Bluetooth: hci5: command tx timeout [ 503.575617][ T5247] 8021q: adding VLAN 0 to HW filter on device eth13 [ 504.348831][ T7675] hsr_slave_0: entered promiscuous mode [ 504.350880][ T7675] hsr_slave_1: entered promiscuous mode [ 504.357238][ T7675] debugfs: 'hsr0' already exists in 'hsr' [ 504.357362][ T7675] Cannot create hsr debugfs directory [ 504.381016][ T7879] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 507.208256][ T7924] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 507.819732][ T5693] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 507.969696][ T5693] usb 2-1: Using ep0 maxpacket: 16 [ 507.971970][ T5693] usb 2-1: unable to get BOS descriptor or descriptor too short [ 507.972013][ T5693] usb 2-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=23.bb [ 507.975573][ T5693] usb 2-1: config 4 has an invalid interface number: 86 but max is 0 [ 507.975595][ T5693] usb 2-1: config 4 has no interface number 0 [ 507.975627][ T5693] usb 2-1: config 4 interface 86 altsetting 11 endpoint 0x3 has an invalid bInterval 127, changing to 10 [ 507.975649][ T5693] usb 2-1: config 4 interface 86 altsetting 11 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 507.975668][ T5693] usb 2-1: config 4 interface 86 altsetting 11 endpoint 0x8B has invalid wMaxPacketSize 0 [ 507.975685][ T5693] usb 2-1: config 4 interface 86 has no altsetting 0 [ 507.977893][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.977912][ T5693] usb 2-1: Product: syz [ 507.977923][ T5693] usb 2-1: Manufacturer: syz [ 507.977935][ T5693] usb 2-1: SerialNumber: syz [ 508.523344][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.525958][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.959056][ T7925] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 510.178312][ T7820] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.178840][ T7820] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.179069][ T7820] bridge_slave_0: entered allmulticast mode [ 510.209309][ T7820] bridge_slave_0: entered promiscuous mode [ 510.300058][ T5719] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 510.341672][ T7820] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.341968][ T7820] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.342156][ T7820] bridge_slave_1: entered allmulticast mode [ 510.433798][ T7820] bridge_slave_1: entered promiscuous mode [ 510.579615][ T5719] usb 1-1: Using ep0 maxpacket: 16 [ 510.582679][ T5719] usb 1-1: unable to get BOS descriptor or descriptor too short [ 510.582722][ T5719] usb 1-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=23.bb [ 510.587163][ T5719] usb 1-1: config 4 has an invalid interface number: 86 but max is 0 [ 510.587185][ T5719] usb 1-1: config 4 has no interface number 0 [ 510.587501][ T5719] usb 1-1: config 4 interface 86 altsetting 11 endpoint 0x3 has an invalid bInterval 127, changing to 10 [ 510.587538][ T5719] usb 1-1: config 4 interface 86 altsetting 11 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 510.587559][ T5719] usb 1-1: config 4 interface 86 altsetting 11 endpoint 0x8B has invalid wMaxPacketSize 0 [ 510.587724][ T5719] usb 1-1: config 4 interface 86 has no altsetting 0 [ 510.695073][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.695107][ T5719] usb 1-1: Product: syz [ 510.695353][ T5719] usb 1-1: Manufacturer: syz [ 510.695371][ T5719] usb 1-1: SerialNumber: syz [ 511.532662][ T7820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.666169][ T7820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.275245][ T7820] team0: Port device team_slave_0 added [ 512.343424][ T7820] team0: Port device team_slave_1 added [ 513.142507][ T5693] cypress_m8 2-1:4.86: DeLorme Earthmate USB converter detected [ 513.265873][ T5693] usb 2-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 513.854124][ T7820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.854147][ T7820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.854178][ T7820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.896084][ T7820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.915075][ T7820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.915147][ T7820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.131585][ T5318] usb 2-1: USB disconnect, device number 14 [ 515.456216][ T5318] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 515.473953][ T5318] cypress_m8 2-1:4.86: device disconnected [ 516.324090][ T5719] cypress_m8 1-1:4.86: DeLorme Earthmate USB converter detected [ 516.381047][ T5719] usb 1-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 516.536489][ T5247] 8021q: adding VLAN 0 to HW filter on device eth15 [ 516.647573][ T7820] hsr_slave_0: entered promiscuous mode [ 516.660488][ T7820] hsr_slave_1: entered promiscuous mode [ 516.666370][ T7820] debugfs: 'hsr0' already exists in 'hsr' [ 516.666403][ T7820] Cannot create hsr debugfs directory [ 516.915348][ T5719] usb 1-1: USB disconnect, device number 10 [ 517.067087][ T5719] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 517.073677][ T5719] cypress_m8 1-1:4.86: device disconnected [ 517.791419][ T1447] bridge_slave_1: left allmulticast mode [ 517.791462][ T1447] bridge_slave_1: left promiscuous mode [ 517.791744][ T1447] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.971978][ T1447] bridge_slave_0: left allmulticast mode [ 517.972012][ T1447] bridge_slave_0: left promiscuous mode [ 517.972950][ T1447] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.500993][ T1447] bridge_slave_1: left allmulticast mode [ 518.501036][ T1447] bridge_slave_1: left promiscuous mode [ 518.501301][ T1447] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.625040][ T1447] bridge_slave_0: left allmulticast mode [ 518.625084][ T1447] bridge_slave_0: left promiscuous mode [ 518.625375][ T1447] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.920828][ T7978] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 525.167558][ T1447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.520197][ T1447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.568820][ T1447] bond0 (unregistering): Released all slaves [ 529.453671][ T1447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.509944][ T5597] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 529.512019][ T1447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.582946][ T1447] bond0 (unregistering): Released all slaves [ 529.663099][ T8001] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 529.671151][ T5597] usb 2-1: Using ep0 maxpacket: 16 [ 529.689713][ T5597] usb 2-1: unable to get BOS descriptor or descriptor too short [ 529.689776][ T5597] usb 2-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=23.bb [ 529.696492][ T5597] usb 2-1: config 4 has an invalid interface number: 86 but max is 0 [ 529.696526][ T5597] usb 2-1: config 4 has no interface number 0 [ 529.696574][ T5597] usb 2-1: config 4 interface 86 altsetting 11 endpoint 0x3 has an invalid bInterval 127, changing to 10 [ 529.696606][ T5597] usb 2-1: config 4 interface 86 altsetting 11 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 529.696634][ T5597] usb 2-1: config 4 interface 86 altsetting 11 endpoint 0x8B has invalid wMaxPacketSize 0 [ 529.696660][ T5597] usb 2-1: config 4 interface 86 has no altsetting 0 [ 529.777973][ T5597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.778055][ T5597] usb 2-1: Product: syz [ 529.778134][ T5597] usb 2-1: Manufacturer: syz [ 529.778178][ T5597] usb 2-1: SerialNumber: syz [ 532.019711][ T5590] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 532.263079][ T5590] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 532.266330][ T5590] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 532.266426][ T5590] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.266447][ T5590] usb 1-1: config 0 has no interface number 0 [ 532.266504][ T5590] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 532.328007][ T5590] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 532.328064][ T5590] usb 1-1: Product: syz [ 532.328081][ T5590] usb 1-1: SerialNumber: syz [ 532.384876][ T5590] usb 1-1: config 0 descriptor?? [ 532.865935][ T5590] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 532.887296][ T5590] usb 1-1: USB disconnect, device number 11 [ 533.359201][ T5596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 533.421056][ T5596] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 533.423248][ T5596] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 533.447155][ T5596] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 533.460000][ T5596] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 533.925353][ T1447] hsr_slave_0: left promiscuous mode [ 533.991573][ T1447] hsr_slave_1: left promiscuous mode [ 533.993967][ T1447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.044788][ T1447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.379980][ T1447] hsr_slave_0: left promiscuous mode [ 534.400218][ T1447] hsr_slave_1: left promiscuous mode [ 534.413839][ T1447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.441714][ T1447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.601057][ T1447] veth1_vlan: left promiscuous mode [ 534.601280][ T1447] veth0_vlan: left promiscuous mode [ 535.042410][ T5597] cypress_m8 2-1:4.86: DeLorme Earthmate USB converter detected [ 535.128999][ T5597] usb 2-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 535.669783][ T5593] Bluetooth: hci1: command tx timeout [ 536.301328][ T1447] team0 (unregistering): Port device team_slave_1 removed [ 536.351558][ T8021] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 536.373114][ T1447] team0 (unregistering): Port device team_slave_0 removed [ 536.618200][ T5596] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 536.675026][ T5596] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 536.677808][ T5596] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 536.678991][ T5596] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 536.713213][ T5596] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 538.039076][ T5596] Bluetooth: hci1: command tx timeout [ 538.659644][ T198] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 538.781806][ T1447] team0 (unregistering): Port device team_slave_1 removed [ 538.812309][ T198] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 538.814451][ T198] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 538.814480][ T198] usb 1-1: config 0 has no interface number 0 [ 538.814528][ T198] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 538.814557][ T198] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 538.814587][ T198] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 538.818089][ T198] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 538.818117][ T198] usb 1-1: Product: syz [ 538.818134][ T198] usb 1-1: SerialNumber: syz [ 538.870261][ T5596] Bluetooth: hci6: command tx timeout [ 538.933254][ T1447] team0 (unregistering): Port device team_slave_0 removed [ 538.988307][ T198] usb 1-1: config 0 descriptor?? [ 539.003878][ T198] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 539.045894][ T198] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input17 [ 539.708896][ C0] cm109_urb_ctl_callback: 450 callbacks suppressed [ 539.708928][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 539.709208][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 539.709529][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 539.712156][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 539.712583][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 539.712991][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 539.713366][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 539.713727][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 539.714120][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 539.714502][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 539.791373][ T5590] usb 1-1: USB disconnect, device number 12 [ 539.791515][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 539.892224][ T5590] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 540.069709][ T5596] Bluetooth: hci1: command tx timeout [ 540.677745][ T5590] usb 2-1: USB disconnect, device number 15 [ 540.794172][ T5590] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 540.794724][ T5590] cypress_m8 2-1:4.86: device disconnected [ 540.953713][ T5596] Bluetooth: hci6: command tx timeout [ 542.151144][ T5596] Bluetooth: hci1: command tx timeout [ 543.030494][ T5596] Bluetooth: hci6: command tx timeout [ 543.274884][ T8064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 544.891111][ T5247] 8021q: adding VLAN 0 to HW filter on device eth16 [ 545.110871][ T5593] Bluetooth: hci6: command tx timeout [ 546.463706][ T8010] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.465517][ T8010] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.466152][ T8010] bridge_slave_0: entered allmulticast mode [ 546.512595][ T8010] bridge_slave_0: entered promiscuous mode [ 546.621073][ T8010] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.621211][ T8010] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.621449][ T8010] bridge_slave_1: entered allmulticast mode [ 546.627409][ T8010] bridge_slave_1: entered promiscuous mode [ 547.291908][ T8010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.389938][ T1447] bridge_slave_1: left allmulticast mode [ 547.389984][ T1447] bridge_slave_1: left promiscuous mode [ 547.394630][ T1447] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.647341][ T1447] bridge_slave_0: left allmulticast mode [ 547.647386][ T1447] bridge_slave_0: left promiscuous mode [ 547.647688][ T1447] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.312465][ T1447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.423068][ T1447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.492301][ T1447] bond0 (unregistering): Released all slaves [ 548.645905][ T8010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.749891][ T8022] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.750015][ T8022] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.750216][ T8022] bridge_slave_0: entered allmulticast mode [ 548.812844][ T8022] bridge_slave_0: entered promiscuous mode [ 549.370886][ T8022] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.371025][ T8022] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.371338][ T8022] bridge_slave_1: entered allmulticast mode [ 549.374305][ T8022] bridge_slave_1: entered promiscuous mode [ 549.535786][ T8010] team0: Port device team_slave_0 added [ 549.696887][ T1447] hsr_slave_0: left promiscuous mode [ 549.730417][ T1447] hsr_slave_1: left promiscuous mode [ 549.731940][ T1447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.754511][ T1447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.220534][ T1447] team0 (unregistering): Port device team_slave_1 removed [ 550.280351][ T1447] team0 (unregistering): Port device team_slave_0 removed [ 550.777387][ T8010] team0: Port device team_slave_1 added [ 550.870463][ T8022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.642763][ T8022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.722288][ T8010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.722309][ T8010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.722338][ T8010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.889835][ T8010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.889856][ T8010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.889887][ T8010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.950401][ T8022] team0: Port device team_slave_0 added [ 552.215355][ T8022] team0: Port device team_slave_1 added [ 552.681841][ T8022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.681863][ T8022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.681894][ T8022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.786213][ T8022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.786229][ T8022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.786250][ T8022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.860833][ T8010] hsr_slave_0: entered promiscuous mode [ 552.862687][ T8010] hsr_slave_1: entered promiscuous mode [ 552.863780][ T8010] debugfs: 'hsr0' already exists in 'hsr' [ 552.863807][ T8010] Cannot create hsr debugfs directory [ 554.667356][ T5596] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 554.691182][ T5596] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 554.698247][ T5596] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 554.719977][ T5596] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 554.722873][ T5596] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 554.993241][ T8022] hsr_slave_0: entered promiscuous mode [ 554.997111][ T8022] hsr_slave_1: entered promiscuous mode [ 555.013978][ T8022] debugfs: 'hsr0' already exists in 'hsr' [ 555.014010][ T8022] Cannot create hsr debugfs directory [ 556.869762][ T5593] Bluetooth: hci2: command tx timeout [ 558.712029][ T8139] syz.0.351 (8139) used greatest stack depth: 18336 bytes left [ 558.949686][ T5593] Bluetooth: hci2: command tx timeout [ 559.109690][ T5318] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 559.127979][ T1447] bridge_slave_1: left allmulticast mode [ 559.128020][ T1447] bridge_slave_1: left promiscuous mode [ 559.128335][ T1447] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.260593][ T5318] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 559.262287][ T5318] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 559.262331][ T5318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.334967][ T1447] bridge_slave_0: left allmulticast mode [ 559.335006][ T1447] bridge_slave_0: left promiscuous mode [ 559.335215][ T1447] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.584049][ T5318] as10x_usb: device has been detected [ 559.585005][ T5318] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 559.947925][ T5318] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 560.176595][ T5318] as10x_usb: error during firmware upload part1 [ 560.177551][ T5318] Registered device Abilis Systems DVB-Titan [ 560.210771][ T5318] usb 1-1: USB disconnect, device number 13 [ 560.398446][ T1447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.603809][ T5318] Unregistered device Abilis Systems DVB-Titan [ 560.630809][ T1447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.693650][ T5318] as10x_usb: device has been disconnected [ 560.715862][ T1447] bond0 (unregistering): Released all slaves [ 561.055947][ T5593] Bluetooth: hci2: command tx timeout [ 562.532705][ T8208] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 562.871076][ T1447] hsr_slave_0: left promiscuous mode [ 562.909663][ T1447] hsr_slave_1: left promiscuous mode [ 562.911062][ T1447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.961869][ T1447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.126212][ T5593] Bluetooth: hci2: command tx timeout [ 563.540904][ T1447] team0 (unregistering): Port device team_slave_1 removed [ 563.612010][ T1447] team0 (unregistering): Port device team_slave_0 removed [ 566.739811][ T8161] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.740074][ T8161] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.740323][ T8161] bridge_slave_0: entered allmulticast mode [ 566.743308][ T8161] bridge_slave_0: entered promiscuous mode [ 566.748900][ T8161] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.749074][ T8161] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.749298][ T8161] bridge_slave_1: entered allmulticast mode [ 566.777267][ T8161] bridge_slave_1: entered promiscuous mode [ 566.932473][ T8161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.977058][ T8161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.066299][ T8161] team0: Port device team_slave_0 added [ 567.140027][ T8161] team0: Port device team_slave_1 added [ 567.229207][ T8161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.229235][ T8161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.229264][ T8161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.342096][ T8161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.342113][ T8161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.342135][ T8161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.948134][ T8272] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 569.893931][ T8161] hsr_slave_0: entered promiscuous mode [ 569.898459][ T8161] hsr_slave_1: entered promiscuous mode [ 569.916683][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.916763][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.990894][ T8161] debugfs: 'hsr0' already exists in 'hsr' [ 569.990933][ T8161] Cannot create hsr debugfs directory [ 572.376403][ T8276] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 572.816516][ T8022] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 572.980435][ T8022] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 573.035270][ T8022] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 573.084307][ T8022] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 573.353720][ T8022] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 573.386630][ T8022] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 573.460927][ T8022] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 573.499826][ T5318] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 573.564003][ T8022] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 573.659834][ T5318] usb 2-1: Using ep0 maxpacket: 16 [ 573.662588][ T5318] usb 2-1: unable to get BOS descriptor or descriptor too short [ 573.662653][ T5318] usb 2-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=23.bb [ 573.664050][ T5318] usb 2-1: config 4 has an invalid interface number: 86 but max is 0 [ 573.664089][ T5318] usb 2-1: config 4 has no interface number 0 [ 573.664173][ T5318] usb 2-1: config 4 interface 86 altsetting 11 endpoint 0x3 has an invalid bInterval 127, changing to 10 [ 573.664197][ T5318] usb 2-1: config 4 interface 86 altsetting 11 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 573.664216][ T5318] usb 2-1: config 4 interface 86 altsetting 11 endpoint 0x8B has invalid wMaxPacketSize 0 [ 573.664234][ T5318] usb 2-1: config 4 interface 86 has no altsetting 0 [ 573.771411][ T5318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.771447][ T5318] usb 2-1: Product: syz [ 573.771459][ T5318] usb 2-1: Manufacturer: syz [ 573.771470][ T5318] usb 2-1: SerialNumber: syz [ 575.945137][ T8010] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 576.235132][ T8010] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 576.381977][ T8010] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 576.548181][ T8010] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 576.796476][ T5318] cypress_m8 2-1:4.86: DeLorme Earthmate USB converter detected [ 576.903052][ T5318] usb 2-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 576.965088][ T5318] usb 2-1: USB disconnect, device number 16 [ 577.093798][ T5318] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 577.096333][ T5318] cypress_m8 2-1:4.86: device disconnected [ 577.119258][ T8010] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 577.196047][ T8010] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 577.223327][ T8010] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 577.325838][ T8010] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 577.468821][ T1447] bridge_slave_1: left allmulticast mode [ 577.468856][ T1447] bridge_slave_1: left promiscuous mode [ 577.469114][ T1447] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.631219][ T1447] bridge_slave_0: left allmulticast mode [ 577.631254][ T1447] bridge_slave_0: left promiscuous mode [ 577.634305][ T1447] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.241550][ T1447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.373507][ T1447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.792142][ T1447] bond0 (unregistering): Released all slaves [ 583.786645][ T8326] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 584.141635][ T1447] hsr_slave_0: left promiscuous mode [ 584.181333][ T1447] hsr_slave_1: left promiscuous mode [ 584.182701][ T1447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.230497][ T1447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.134475][ T1447] team0 (unregistering): Port device team_slave_1 removed [ 585.190775][ T1447] team0 (unregistering): Port device team_slave_0 removed [ 587.464653][ T8348] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 587.778625][ T8022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.121361][ T8022] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.636540][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.637412][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.762818][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.762976][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.863115][ T8010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.400564][ T8010] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.552284][ T5318] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 591.791979][ T7627] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.792216][ T7627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.799729][ T5318] usb 1-1: Using ep0 maxpacket: 16 [ 591.820151][ T5318] usb 1-1: unable to get BOS descriptor or descriptor too short [ 591.820567][ T5318] usb 1-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=23.bb [ 591.851601][ T5318] usb 1-1: config 4 has an invalid interface number: 86 but max is 0 [ 591.851639][ T5318] usb 1-1: config 4 has no interface number 0 [ 591.851695][ T5318] usb 1-1: config 4 interface 86 altsetting 11 endpoint 0x3 has an invalid bInterval 127, changing to 10 [ 591.851733][ T5318] usb 1-1: config 4 interface 86 altsetting 11 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 591.851778][ T5318] usb 1-1: config 4 interface 86 altsetting 11 endpoint 0x8B has invalid wMaxPacketSize 0 [ 591.851808][ T5318] usb 1-1: config 4 interface 86 has no altsetting 0 [ 592.397415][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.397734][ T5810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.864314][ T5596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 594.951116][ T5596] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 594.991863][ T5596] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 595.038031][ T5596] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 595.059041][ T5596] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 597.922198][ T5593] Bluetooth: hci1: command tx timeout [ 598.907518][ T5318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.976721][ T5318] usb 1-1: can't set config #4, error -71 [ 599.048513][ T5318] usb 1-1: USB disconnect, device number 14 [ 599.508803][ T8161] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 599.604080][ T8161] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 599.640798][ T8161] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 599.883372][ T5596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 599.946218][ T5596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 599.966907][ T5596] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 599.970806][ T5596] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 599.988270][ T5596] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 599.991289][ T5596] Bluetooth: hci1: command tx timeout [ 600.033878][ T8161] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 600.039381][ T8161] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 600.426495][ T8161] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 600.494147][ T8161] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 600.582342][ T8161] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 603.353752][ T5593] Bluetooth: hci1: command tx timeout [ 603.353837][ T5593] Bluetooth: hci3: command tx timeout [ 605.430191][ T5596] Bluetooth: hci3: command tx timeout [ 605.430249][ T5596] Bluetooth: hci1: command tx timeout [ 605.630038][ T6081] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 605.872546][ T6081] usb 2-1: Using ep0 maxpacket: 16 [ 605.889150][ T6081] usb 2-1: unable to get BOS descriptor or descriptor too short [ 605.889215][ T6081] usb 2-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=23.bb [ 605.935722][ T6081] usb 2-1: config 4 has an invalid interface number: 86 but max is 0 [ 605.935763][ T6081] usb 2-1: config 4 has no interface number 0 [ 605.935804][ T6081] usb 2-1: config 4 interface 86 altsetting 11 endpoint 0x3 has an invalid bInterval 127, changing to 10 [ 605.935826][ T6081] usb 2-1: config 4 interface 86 altsetting 11 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 605.935846][ T6081] usb 2-1: config 4 interface 86 altsetting 11 endpoint 0x8B has invalid wMaxPacketSize 0 [ 605.935864][ T6081] usb 2-1: config 4 interface 86 has no altsetting 0 [ 605.999107][ T6081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.999137][ T6081] usb 2-1: Product: syz [ 605.999151][ T6081] usb 2-1: Manufacturer: syz [ 605.999165][ T6081] usb 2-1: SerialNumber: syz [ 607.510396][ T8472] Bluetooth: hci3: command tx timeout [ 607.816362][ T8483] binder: 8482:8483 ioctl 4018620d 0 returned -22 [ 607.898346][ T6081] cypress_m8 2-1:4.86: DeLorme Earthmate USB converter detected [ 607.929185][ T6081] usb 2-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 607.967856][ T6081] usb 2-1: USB disconnect, device number 17 [ 608.101175][ T6081] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 608.103567][ T6081] cypress_m8 2-1:4.86: device disconnected [ 608.591027][ T8390] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.591164][ T8390] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.591333][ T8390] bridge_slave_0: entered allmulticast mode [ 608.593673][ T8390] bridge_slave_0: entered promiscuous mode [ 608.772048][ T1447] bridge_slave_1: left allmulticast mode [ 608.772083][ T1447] bridge_slave_1: left promiscuous mode [ 608.772382][ T1447] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.832418][ T8499] netdevsim netdevsim0: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 609.011063][ T1447] bridge_slave_0: left allmulticast mode [ 609.011096][ T1447] bridge_slave_0: left promiscuous mode [ 609.011343][ T1447] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.189722][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 609.339752][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 609.340652][ T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 609.342781][ T9] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 609.342813][ T9] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 609.342838][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 609.342893][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 609.342917][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 609.342945][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 609.342970][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 609.342995][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 609.343044][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.479315][ T9] usb 1-1: config 0 descriptor?? [ 609.591075][ T8472] Bluetooth: hci3: command tx timeout [ 609.753144][ T9] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 610.045123][ T32] usb 1-1: USB disconnect, device number 15 [ 610.081074][ T32] usblp0: removed [ 612.760688][ T1447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.840603][ T1447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.894702][ T1447] bond0 (unregistering): Released all slaves [ 612.954994][ T8390] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.955154][ T8390] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.955492][ T8390] bridge_slave_1: entered allmulticast mode [ 612.958592][ T8390] bridge_slave_1: entered promiscuous mode [ 613.060425][ T8161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.287997][ T8390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.380975][ T8390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.857744][ T1447] hsr_slave_0: left promiscuous mode [ 613.891359][ T1447] hsr_slave_1: left promiscuous mode [ 613.893651][ T1447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.874995][ T1447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.370484][ T1447] team0 (unregistering): Port device team_slave_1 removed [ 615.424477][ T1447] team0 (unregistering): Port device team_slave_0 removed [ 617.402981][ T5593] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 617.463093][ T5593] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 617.467095][ T5593] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 617.516066][ T5593] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 617.543522][ T5593] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 617.947712][ T8390] team0: Port device team_slave_0 added [ 618.086153][ T8390] team0: Port device team_slave_1 added [ 618.674498][ T8390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.674515][ T8390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.674538][ T8390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.766131][ T8390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.766158][ T8390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.766180][ T8390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.373228][ T8420] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.373367][ T8420] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.373974][ T8420] bridge_slave_0: entered allmulticast mode [ 619.377143][ T8420] bridge_slave_0: entered promiscuous mode [ 619.528985][ T8420] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.529081][ T8420] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.529268][ T8420] bridge_slave_1: entered allmulticast mode [ 619.677550][ T8420] bridge_slave_1: entered promiscuous mode [ 619.689748][ T8472] Bluetooth: hci5: command tx timeout [ 619.770240][ T8390] hsr_slave_0: entered promiscuous mode [ 619.776729][ T8390] hsr_slave_1: entered promiscuous mode [ 619.794043][ T8390] debugfs: 'hsr0' already exists in 'hsr' [ 619.794075][ T8390] Cannot create hsr debugfs directory [ 619.914578][ T32] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 620.080417][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 620.084203][ T32] usb 2-1: unable to get BOS descriptor or descriptor too short [ 620.084267][ T32] usb 2-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=23.bb [ 620.092604][ T32] usb 2-1: config 4 has an invalid interface number: 86 but max is 0 [ 620.092727][ T32] usb 2-1: config 4 has no interface number 0 [ 620.092940][ T32] usb 2-1: config 4 interface 86 altsetting 11 endpoint 0x3 has an invalid bInterval 127, changing to 10 [ 620.093022][ T32] usb 2-1: config 4 interface 86 altsetting 11 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 620.093126][ T32] usb 2-1: config 4 interface 86 altsetting 11 endpoint 0x8B has invalid wMaxPacketSize 0 [ 620.093192][ T32] usb 2-1: config 4 interface 86 has no altsetting 0 [ 620.245455][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.245478][ T32] usb 2-1: Product: syz [ 620.245489][ T32] usb 2-1: Manufacturer: syz [ 620.245501][ T32] usb 2-1: SerialNumber: syz [ 621.180956][ T8420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.303133][ T8420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.751354][ T8472] Bluetooth: hci5: command tx timeout [ 622.136382][ T8420] team0: Port device team_slave_0 added [ 622.483014][ T8420] team0: Port device team_slave_1 added [ 623.090140][ T6081] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 623.312010][ T6081] usb 1-1: Using ep0 maxpacket: 16 [ 623.313200][ T6081] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 623.314693][ T6081] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.314743][ T6081] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.406365][ T6081] usb 1-1: config 0 descriptor?? [ 623.461905][ T6081] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input18 [ 623.708452][ T4937] bcm5974 1-1:0.0: could not read from device [ 623.832748][ T8472] Bluetooth: hci5: command tx timeout [ 623.937321][ T6081] usb 1-1: USB disconnect, device number 16 [ 623.977082][ T5247] 8021q: adding VLAN 0 to HW filter on device eth13 [ 624.045636][ T8568] bcm5974 1-1:0.0: could not read from device [ 624.117851][ T8420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.117875][ T8420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.117965][ T8420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.326449][ T8420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.326480][ T8420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.326573][ T8420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.019760][ T6081] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 625.223275][ T6081] usb 1-1: Using ep0 maxpacket: 8 [ 625.243986][ T6081] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 625.265996][ T6081] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.266069][ T6081] usb 1-1: Product: syz [ 625.266081][ T6081] usb 1-1: Manufacturer: syz [ 625.266093][ T6081] usb 1-1: SerialNumber: syz [ 625.327697][ T6081] usb 1-1: config 0 descriptor?? [ 625.360918][ T32] cypress_m8 2-1:4.86: DeLorme Earthmate USB converter detected [ 625.366076][ T32] usb 2-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 625.367208][ T6081] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 625.632224][ T8420] hsr_slave_0: entered promiscuous mode [ 625.633700][ T8420] hsr_slave_1: entered promiscuous mode [ 625.634734][ T8420] debugfs: 'hsr0' already exists in 'hsr' [ 625.634763][ T8420] Cannot create hsr debugfs directory [ 625.844706][ T11] usb 2-1: USB disconnect, device number 18 [ 625.911090][ T8472] Bluetooth: hci5: command tx timeout [ 625.996617][ T11] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 625.997579][ T11] cypress_m8 2-1:4.86: device disconnected [ 626.764840][ T6081] gspca_sonixj: reg_r err -110 [ 626.939906][ T6081] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 627.873314][ T11] usb 1-1: USB disconnect, device number 17 [ 629.159766][ T11] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 629.309882][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 629.327104][ T11] usb 2-1: unable to get BOS descriptor or descriptor too short [ 629.327173][ T11] usb 2-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=23.bb [ 629.331271][ T11] usb 2-1: config 4 has an invalid interface number: 86 but max is 0 [ 629.331302][ T11] usb 2-1: config 4 has no interface number 0 [ 629.331344][ T11] usb 2-1: config 4 interface 86 altsetting 11 endpoint 0x3 has an invalid bInterval 127, changing to 10 [ 629.331370][ T11] usb 2-1: config 4 interface 86 altsetting 11 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 629.331396][ T11] usb 2-1: config 4 interface 86 altsetting 11 endpoint 0x8B has invalid wMaxPacketSize 0 [ 629.331419][ T11] usb 2-1: config 4 interface 86 has no altsetting 0 [ 629.453962][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.453987][ T11] usb 2-1: Product: syz [ 629.453999][ T11] usb 2-1: Manufacturer: syz [ 629.454010][ T11] usb 2-1: SerialNumber: syz [ 630.285346][ T8527] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.285489][ T8527] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.285695][ T8527] bridge_slave_0: entered allmulticast mode [ 630.317947][ T8527] bridge_slave_0: entered promiscuous mode [ 630.354102][ T8527] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.354297][ T8527] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.355000][ T8527] bridge_slave_1: entered allmulticast mode [ 630.384650][ T8527] bridge_slave_1: entered promiscuous mode [ 631.175667][ T8527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.223792][ T8527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.365196][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 631.365279][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.454898][ T8527] team0: Port device team_slave_0 added [ 631.486107][ T8527] team0: Port device team_slave_1 added [ 631.571781][ T11] cypress_m8 2-1:4.86: DeLorme Earthmate USB converter detected [ 631.595787][ T11] usb 2-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 631.702349][ T11] usb 2-1: USB disconnect, device number 19 [ 631.819432][ T11] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 631.824976][ T11] cypress_m8 2-1:4.86: device disconnected [ 632.203788][ T8527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.203808][ T8527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.203830][ T8527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.205984][ T8527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.206002][ T8527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.206026][ T8527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.230278][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3839 [ 634.230308][ C1] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 30, name: ktimers/1 [ 634.230330][ C1] preempt_count: 0, expected: 0 [ 634.230342][ C1] RCU nest depth: 2, expected: 0 [ 634.230373][ C1] locks held by ktimers/1/30: 4, last CPU#1: [ 634.230393][ C1] #0: ffffffff8f059580 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 634.230537][ C1] #1: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 634.230611][ C1] #2: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0 [ 634.230820][ C1] #3: ffff88803def6358 (sk_lock-AF_X25){+.+.}-{0:0}, at: x25_kill_by_neigh+0x134/0x2a0 [ 634.231006][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 634.231042][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 634.231068][ C1] Call Trace: [ 634.231078][ C1] [ 634.231092][ C1] dump_stack_lvl+0xe8/0x150 [ 634.231157][ C1] __might_resched+0x31b/0x470 [ 634.231218][ C1] lock_sock_nested+0x56/0x130 [ 634.231294][ C1] x25_kill_by_neigh+0x134/0x2a0 [ 634.231324][ C1] ? x25_kill_by_neigh+0x2b/0x2a0 [ 634.231360][ C1] x25_lapb_receive_frame+0x1b0/0xfb0 [ 634.231402][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 634.231442][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 634.231487][ C1] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 634.231524][ C1] netif_receive_skb_core+0x2a6/0x2b0 [ 634.231573][ C1] lapbeth_napi_poll+0x45/0x90 [ 634.231683][ C1] __napi_poll+0xae/0x550 [ 634.231776][ C1] net_rx_action+0x621/0xd70 [ 634.231822][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 634.231866][ C1] ? sched_balance_domains+0x770/0x880 [ 634.231918][ C1] handle_softirqs+0x1da/0x6d0 [ 634.231983][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 634.232022][ C1] run_ktimerd+0x6a/0x100 [ 634.232064][ C1] smpboot_thread_fn+0x565/0xa70 [ 634.232108][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 634.232161][ C1] kthread+0x38b/0x470 [ 634.232202][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 634.232241][ C1] ? __pfx_kthread+0x10/0x10 [ 634.232271][ C1] ret_from_fork+0x514/0xb70 [ 634.232313][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 634.232341][ C1] ? __switch_to+0xc89/0x1420 [ 634.232403][ C1] ? __pfx_kthread+0x10/0x10 [ 634.232434][ C1] ret_from_fork_asm+0x1a/0x30 [ 634.232482][ C1] [ 637.679762][ T5247] 8021q: adding VLAN 0 to HW filter on device eth15 [ 638.374833][ T1447] bridge_slave_1: left allmulticast mode [ 638.374909][ T1447] bridge_slave_1: left promiscuous mode [ 638.375222][ T1447] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.482804][ T1447] bridge_slave_0: left allmulticast mode [ 638.482851][ T1447] bridge_slave_0: left promiscuous mode [ 638.483200][ T1447] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.700810][ T1447] bridge_slave_1: left allmulticast mode [ 638.700872][ T1447] bridge_slave_1: left promiscuous mode [ 638.701146][ T1447] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.884107][ T1447] bridge_slave_0: left allmulticast mode [ 638.884156][ T1447] bridge_slave_0: left promiscuous mode [ 638.884439][ T1447] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.901003][ T1447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.000460][ T1447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.062793][ T1447] bond0 (unregistering): Released all slaves [ 640.700613][ T1447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.790811][ T1447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.812237][ T1447] bond0 (unregistering): Released all slaves [ 640.862795][ T5247] 8021q: adding VLAN 0 to HW filter on device eth16 [ 642.221173][ T1447] hsr_slave_0: left promiscuous mode [ 642.269800][ T1447] hsr_slave_1: left promiscuous mode [ 642.271372][ T1447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.335845][ T1447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.562712][ T1447] hsr_slave_0: left promiscuous mode [ 642.601248][ T1447] hsr_slave_1: left promiscuous mode [ 642.602811][ T1447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.645385][ T1447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.310533][ T1447] team0 (unregistering): Port device team_slave_1 removed [ 643.372522][ T1447] team0 (unregistering): Port device team_slave_0 removed [ 643.941966][ T1447] team0 (unregistering): Port device team_slave_1 removed [ 644.002300][ T1447] team0 (unregistering): Port device team_slave_0 removed