last executing test programs: 5m44.733296832s ago: executing program 0 (id=444): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f47"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xa2465) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000100), 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m42.997340788s ago: executing program 0 (id=450): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) r3 = dup3(r2, 0xffffffffffffffff, 0x80000) ioctl$NBD_DO_IT(r3, 0xab03) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd2b, 0x6, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 5m42.644185401s ago: executing program 0 (id=453): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r4 = socket$kcm(0x10, 0x400000002, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r6, {0xd, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 5m37.177321847s ago: executing program 0 (id=466): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_pidfd_open(r1, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, 0x0, 0xb8) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r5, r4, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 5m34.058385717s ago: executing program 0 (id=476): ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) 5m32.509576373s ago: executing program 0 (id=480): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 5m16.562215985s ago: executing program 32 (id=480): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 4m51.164584289s ago: executing program 1 (id=559): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) statx(0xffffffffffffffff, 0x0, 0x800, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000040)=0x6e1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 4m50.269443838s ago: executing program 1 (id=560): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 4m49.086107407s ago: executing program 1 (id=561): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) clock_nanosleep(0xfffffff2, 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4m48.337741072s ago: executing program 1 (id=562): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYRES32], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x800000}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZE(r2, 0x5609, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x87}, &(0x7f00000000c0)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x1, 0x0, 0x0) 4m46.956823076s ago: executing program 1 (id=563): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 4m46.068402923s ago: executing program 1 (id=565): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4010) 4m30.833834141s ago: executing program 33 (id=565): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4010) 12.680401603s ago: executing program 2 (id=985): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 12.679448283s ago: executing program 3 (id=986): r0 = socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000002c0), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x48000, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fcntl$getown(r3, 0x9) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x1000000008, 0x10000, 0x3}, 0x0) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x1f, 0x3}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d40)=ANY=[@ANYBLOB="101300002d00090036bd70000100000004000000cb011180c708605d8a0c9549f671af21be3edd7313f3b3cefa172a8aae2f295cc7"], 0x1310}, 0x1, 0x0, 0x0, 0x20000004}, 0x84) syz_emit_ethernet(0xa7, &(0x7f0000000b00)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x71, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000, 0x1000300, [{0x1, 0xc, "23d13a9528da89ca8687857fa1c05623e430a7e05df65bb50a75504311ee5de0f521d4ef8bdff765650746569fc64eab97bd29f1573ea4d0bf29234512d00dd30ae604dd40e3c151fd4d595866b48657d2cb4ed8721f45e586a02af6449001"}]}}}}}}, 0x0) 11.874503305s ago: executing program 2 (id=987): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x1b) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x29, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x701, 0x10000, 0x0, {0x26}}, 0x14}}, 0x0) 10.588073709s ago: executing program 2 (id=989): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) 10.425668501s ago: executing program 4 (id=990): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) mount$fuseblk(0x0, 0x0, 0x0, 0x1004040, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getqdisc={0x4c, 0x26, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0xd}, {0xc, 0xffe0}, {0x0, 0x10}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {}]}, 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/crash_elfcorehdr_size', 0x149a82, 0xe3) 8.841559623s ago: executing program 4 (id=991): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0xa, 0x6, "6ef1989edd08"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x40, 0x0, 0x5, "4f067310ec"}, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.465775928s ago: executing program 2 (id=992): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) 7.008348573s ago: executing program 3 (id=993): timer_settime(0x0, 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x181c82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) r6 = eventfd2(0x72, 0x800) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000180)={0x10000000}) read$eventfd(r6, &(0x7f0000000080), 0x8) getsockopt$inet_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f0000000100)) 5.801409881s ago: executing program 3 (id=994): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x1, 0x2018, 0x0, 0x8, 0x8, 0x5, 0x657ef077e46ea00d}}) 4.629267086s ago: executing program 4 (id=995): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.543348631s ago: executing program 3 (id=996): socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4c01, &(0x7f0000000240)={0x0, 0x417a, 0x40, 0x8001002, 0x3d5}) r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x0) 4.177535769s ago: executing program 4 (id=997): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$packet(0x11, 0x3, 0x300) pipe(0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0xa00000000407, 0x8000) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0}) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x840) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) 2.506160968s ago: executing program 2 (id=998): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x1b) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x29, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x701, 0x10000, 0x0, {0x26}}, 0x14}}, 0x0) 1.460399207s ago: executing program 3 (id=999): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x44080) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount$fuseblk(0x0, 0x0, 0x0, 0x1004040, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getqdisc={0x4c, 0x26, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0xd}, {0xc, 0xffe0}, {0x0, 0x10}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {}]}, 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/crash_elfcorehdr_size', 0x149a82, 0xe3) 1.38520204s ago: executing program 2 (id=1000): openat(0xffffffffffffff9c, 0x0, 0x143082, 0x58) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = syz_io_uring_setup(0x24ff, &(0x7f0000000440)={0x0, 0xf36b, 0x10100, 0x3, 0x155}, &(0x7f0000000100)=0x0, &(0x7f0000000f00)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0x40, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r4, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) 294.812505ms ago: executing program 3 (id=1001): r0 = socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000002c0), 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x48000, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) fcntl$getown(r3, 0x9) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x1000000008, 0x10000, 0x3}, 0x0) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x1f, 0x3}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d40)=ANY=[@ANYBLOB="101300002d00090036bd70000100000004000000cb011180c708605d8a0c9549f671af21be3edd7313f3b3cefa172a8aae2f295cc7"], 0x1310}, 0x1, 0x0, 0x0, 0x20000004}, 0x84) syz_emit_ethernet(0xa7, &(0x7f0000000b00)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x71, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000, 0x1000300, [{0x1, 0xc, "23d13a9528da89ca8687857fa1c05623e430a7e05df65bb50a75504311ee5de0f521d4ef8bdff765650746569fc64eab97bd29f1573ea4d0bf29234512d00dd30ae604dd40e3c151fd4d595866b48657d2cb4ed8721f45e586a02af6449001"}]}}}}}}, 0x0) 249.855255ms ago: executing program 4 (id=1002): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=1003): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x48, r1, 0x1, 0x1, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) kernel console output (not intermixed with test programs): 6.386461][ T7972] ? __nla_parse+0x40/0x60 [ 366.386479][ T7972] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 366.386510][ T7972] genl_family_rcv_msg_doit+0x215/0x300 [ 366.386542][ T7972] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 366.386583][ T7972] ? bpf_lsm_capable+0x9/0x20 [ 366.386604][ T7972] ? security_capable+0x7e/0x2e0 [ 366.386635][ T7972] genl_rcv_msg+0x60e/0x790 [ 366.386669][ T7972] ? __pfx_genl_rcv_msg+0x10/0x10 [ 366.386694][ T7972] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 366.386718][ T7972] ? __lock_acquire+0xab9/0xd20 [ 366.386750][ T7972] netlink_rcv_skb+0x205/0x470 [ 366.386772][ T7972] ? __pfx_genl_rcv_msg+0x10/0x10 [ 366.386799][ T7972] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 366.386838][ T7972] ? netlink_deliver_tap+0x2e/0x1b0 [ 366.386858][ T7972] ? netlink_deliver_tap+0x2e/0x1b0 [ 366.386884][ T7972] genl_rcv+0x28/0x40 [ 366.386906][ T7972] netlink_unicast+0x843/0xa10 [ 366.386936][ T7972] ? __pfx_netlink_unicast+0x10/0x10 [ 366.386958][ T7972] ? netlink_sendmsg+0x642/0xb30 [ 366.386977][ T7972] ? skb_put+0x11b/0x210 [ 366.387004][ T7972] netlink_sendmsg+0x805/0xb30 [ 366.387043][ T7972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.387075][ T7972] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 366.387093][ T7972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.387116][ T7972] __sock_sendmsg+0x219/0x270 [ 366.387141][ T7972] ____sys_sendmsg+0x508/0x820 [ 366.387172][ T7972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.387208][ T7972] ? import_iovec+0x74/0xa0 [ 366.387232][ T7972] ___sys_sendmsg+0x21f/0x2a0 [ 366.387257][ T7972] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.387325][ T7972] ? __fget_files+0x2a/0x420 [ 366.387347][ T7972] ? __fget_files+0x3a6/0x420 [ 366.387383][ T7972] __x64_sys_sendmsg+0x1a1/0x260 [ 366.387411][ T7972] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 366.387448][ T7972] ? rcu_is_watching+0x15/0xb0 [ 366.387479][ T7972] ? do_syscall_64+0xbe/0x3b0 [ 366.387506][ T7972] do_syscall_64+0xfa/0x3b0 [ 366.387527][ T7972] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.387548][ T7972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.387566][ T7972] ? clear_bhb_loop+0x60/0xb0 [ 366.387589][ T7972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.387613][ T7972] RIP: 0033:0x7f9433a4ebe9 [ 366.387630][ T7972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.387646][ T7972] RSP: 002b:00007f9431851038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.387666][ T7972] RAX: ffffffffffffffda RBX: 00007f9433c76270 RCX: 00007f9433a4ebe9 [ 366.387680][ T7972] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000008 [ 366.387692][ T7972] RBP: 00007f9433ad1e19 R08: 0000000000000000 R09: 0000000000000000 [ 366.387704][ T7972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.387714][ T7972] R13: 00007f9433c76308 R14: 00007f9433c76270 R15: 00007ffe4fb3ef18 [ 366.387744][ T7972] [ 366.894512][ T7970] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 366.894894][ T7970] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 366.895090][ T7970] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 366.895266][ T7970] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 366.939550][ T7970] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 366.939859][ T7970] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 366.940860][ T7970] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 367.029841][ T7970] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 367.165071][ T5914] usb 4-1: USB disconnect, device number 22 [ 368.440365][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout [ 368.903057][ T5853] Bluetooth: hci4: command 0x0405 tx timeout [ 368.903097][ T5853] Bluetooth: hci2: command 0x0c1a tx timeout [ 368.903125][ T5853] Bluetooth: hci1: command 0x0c1a tx timeout [ 368.982612][ T59] Bluetooth: hci3: command 0x041b tx timeout [ 368.983143][ T59] Bluetooth: hci5: command 0x0c1a tx timeout [ 371.723911][ T5853] Bluetooth: hci3: command 0x041b tx timeout [ 372.305708][ T44] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 372.461324][ T44] usb 3-1: device descriptor read/64, error -71 [ 372.542481][ T5929] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 372.695449][ T5929] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 372.695495][ T5929] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.695516][ T5929] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 372.695536][ T5929] usb 5-1: config 0 interface 0 has no altsetting 0 [ 372.695566][ T5929] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 372.695585][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.702443][ T44] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 372.794541][ T5929] usb 5-1: config 0 descriptor?? [ 372.810910][ T5929] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 372.832458][ T44] usb 3-1: device descriptor read/64, error -71 [ 372.942976][ T44] usb usb3-port1: attempt power cycle [ 373.055212][ T7666] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 373.259985][ T7666] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 373.613029][ T44] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 373.658038][ T44] usb 3-1: device descriptor read/8, error -71 [ 373.962555][ T44] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 373.983475][ T44] usb 3-1: device descriptor read/8, error -71 [ 374.058776][ T5853] Bluetooth: hci3: command 0x041b tx timeout [ 374.136820][ T44] usb usb3-port1: unable to enumerate USB device [ 374.225691][ T7666] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 374.511256][ T7666] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 375.473880][ T990] Process accounting resumed [ 375.721926][ T31] usb 5-1: USB disconnect, device number 25 [ 376.062440][ T990] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 376.102460][ T5853] Bluetooth: hci3: command 0x041b tx timeout [ 376.202567][ T31] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 376.359607][ T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 376.359637][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 376.359657][ T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 376.400326][ T31] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 376.400354][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.400372][ T31] usb 5-1: Product: syz [ 376.400384][ T31] usb 5-1: Manufacturer: syz [ 376.400397][ T31] usb 5-1: SerialNumber: syz [ 376.442539][ T990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.442585][ T990] usb 3-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 376.442606][ T990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.458056][ T990] usb 3-1: config 0 descriptor?? [ 376.862439][ T3587] smc: removing ib device syz1 [ 377.259884][ T31] usb 5-1: config 0 descriptor?? [ 377.262853][ T8038] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 377.283349][ T31] dm9601 5-1:0.0: probe with driver dm9601 failed with error -22 [ 377.464360][ T990] usbhid 3-1:0.0: can't add hid device: -71 [ 377.464481][ T990] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 377.551303][ T990] usb 3-1: USB disconnect, device number 9 [ 377.553952][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 377.566890][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 377.568204][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 377.571637][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 377.573580][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 377.767298][ T59] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 378.182469][ T59] Bluetooth: hci3: command 0x041b tx timeout [ 378.460670][ T7954] chnl_net:caif_netlink_parms(): no params data found [ 378.590061][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.590140][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.152631][ T5929] usb 5-1: USB disconnect, device number 26 [ 379.732843][ T59] Bluetooth: hci1: command tx timeout [ 380.084563][ T44] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 380.603798][ T59] Bluetooth: hci3: command 0x041b tx timeout [ 380.754696][ T44] usb 3-1: device descriptor read/64, error -71 [ 380.992546][ T44] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 381.122606][ T44] usb 3-1: device descriptor read/64, error -71 [ 381.232948][ T44] usb usb3-port1: attempt power cycle [ 381.363324][ T5929] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 381.519947][ T5929] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 381.519994][ T5929] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.520016][ T5929] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 381.520039][ T5929] usb 5-1: config 0 interface 0 has no altsetting 0 [ 381.520071][ T5929] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 381.520092][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.579607][ T44] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 381.613281][ T44] usb 3-1: device descriptor read/8, error -71 [ 381.691879][ T5929] usb 5-1: config 0 descriptor?? [ 381.741149][ T5929] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 381.793973][ T59] Bluetooth: hci1: command tx timeout [ 381.794244][ T59] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 381.794346][ T59] Bluetooth: hci4: Injecting HCI hardware error event [ 381.796935][ T59] Bluetooth: hci4: hardware error 0x00 [ 381.852511][ T44] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 381.883686][ T44] usb 3-1: device descriptor read/8, error -71 [ 382.004255][ T44] usb usb3-port1: unable to enumerate USB device [ 382.473953][ T8099] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 382.474100][ T8099] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 382.477513][ T8099] vhci_hcd vhci_hcd.0: Device attached [ 382.539089][ T8099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.865456][ T44] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 383.106325][ T8102] vhci_hcd: connection reset by peer [ 383.121870][ T13] vhci_hcd: stop threads [ 383.121924][ T13] vhci_hcd: release socket [ 383.158615][ T13] vhci_hcd: disconnect device [ 383.863522][ T5853] Bluetooth: hci1: command tx timeout [ 383.863640][ T59] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 384.712377][ T8106] ALSA: mixer_oss: invalid OSS volume '' [ 384.793704][ T5914] usb 5-1: USB disconnect, device number 27 [ 385.419812][ T8118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.620'. [ 385.703035][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.620'. [ 385.944097][ T59] Bluetooth: hci1: command tx timeout [ 385.979214][ T7954] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.979344][ T7954] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.979589][ T7954] bridge_slave_0: entered allmulticast mode [ 385.988352][ T7954] bridge_slave_0: entered promiscuous mode [ 386.122649][ T5847] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 387.168427][ T5847] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 387.168458][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 387.168478][ T5847] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 387.210700][ T5847] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 387.210727][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.210745][ T5847] usb 3-1: Product: syz [ 387.210757][ T5847] usb 3-1: Manufacturer: syz [ 387.210770][ T5847] usb 3-1: SerialNumber: syz [ 387.491925][ T5847] usb 3-1: config 0 descriptor?? [ 387.500310][ T8122] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 387.574926][ T5847] dm9601 3-1:0.0: probe with driver dm9601 failed with error -22 [ 387.581002][ T7954] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.581141][ T7954] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.581374][ T7954] bridge_slave_1: entered allmulticast mode [ 387.706095][ T7954] bridge_slave_1: entered promiscuous mode [ 387.902511][ T5914] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 388.012559][ T44] vhci_hcd: vhci_device speed not set [ 388.032510][ T5914] usb 5-1: device descriptor read/64, error -71 [ 388.272706][ T5914] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 388.412569][ T5914] usb 5-1: device descriptor read/64, error -71 [ 388.437939][ T7954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.460497][ T7954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.522920][ T5914] usb usb5-port1: attempt power cycle [ 388.816358][ T5929] usb 3-1: USB disconnect, device number 14 [ 388.863882][ T5914] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 388.904821][ T5914] usb 5-1: device descriptor read/8, error -71 [ 388.959814][ T7954] team0: Port device team_slave_0 added [ 389.056380][ T7954] team0: Port device team_slave_1 added [ 389.152521][ T5914] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 389.180570][ T5914] usb 5-1: device descriptor read/8, error -71 [ 389.292874][ T5914] usb usb5-port1: unable to enumerate USB device [ 389.302665][ T5929] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 389.355836][ T8051] chnl_net:caif_netlink_parms(): no params data found [ 389.377213][ T7954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.377229][ T7954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.377253][ T7954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.436462][ T7954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.436478][ T7954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.436503][ T7954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.454727][ T5929] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 389.454773][ T5929] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.454793][ T5929] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 389.454817][ T5929] usb 3-1: config 0 interface 0 has no altsetting 0 [ 389.454847][ T5929] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 389.454866][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.460046][ T5929] usb 3-1: config 0 descriptor?? [ 389.524201][ T5929] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 390.710609][ T8151] ALSA: mixer_oss: invalid OSS volume '' [ 392.216090][ T1116] bridge_slave_1: left allmulticast mode [ 392.216124][ T1116] bridge_slave_1: left promiscuous mode [ 392.218306][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.289134][ T5914] usb 3-1: USB disconnect, device number 15 [ 392.514551][ T1116] bridge_slave_0: left allmulticast mode [ 392.514582][ T1116] bridge_slave_0: left promiscuous mode [ 392.553238][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.722450][ T990] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 393.783036][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.874403][ T990] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 393.874422][ T990] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 393.879098][ T990] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 393.879114][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.879124][ T990] usb 4-1: Product: syz [ 393.879131][ T990] usb 4-1: Manufacturer: syz [ 393.879138][ T990] usb 4-1: SerialNumber: syz [ 393.883262][ T990] usb 4-1: config 0 descriptor?? [ 393.886152][ T8177] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 393.886330][ T8177] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 393.930429][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.080740][ T1116] bond0 (unregistering): Released all slaves [ 394.096419][ T8177] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 394.096530][ T8177] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 394.446420][ T7954] hsr_slave_0: entered promiscuous mode [ 394.452941][ T7954] hsr_slave_1: entered promiscuous mode [ 394.455177][ T7954] debugfs: 'hsr0' already exists in 'hsr' [ 394.455201][ T7954] Cannot create hsr debugfs directory [ 394.602920][ T990] Error reading MAC address [ 394.698747][ T8051] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.698881][ T8051] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.699086][ T8051] bridge_slave_0: entered allmulticast mode [ 394.724661][ T8051] bridge_slave_0: entered promiscuous mode [ 394.739519][ T8051] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.739726][ T8051] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.739931][ T8051] bridge_slave_1: entered allmulticast mode [ 394.763424][ T8051] bridge_slave_1: entered promiscuous mode [ 396.190172][ T8185] ALSA: mixer_oss: invalid OSS volume '' [ 396.383476][ T1116] hsr_slave_0: left promiscuous mode [ 396.431614][ T1116] hsr_slave_1: left promiscuous mode [ 396.433385][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.487940][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.534451][ T990] usb 4-1: USB disconnect, device number 23 [ 397.738011][ T5929] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 397.872502][ T5929] usb 5-1: device descriptor read/64, error -71 [ 398.012620][ T990] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 398.112497][ T5929] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 398.220659][ T990] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 398.220707][ T990] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.220726][ T990] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 398.220751][ T990] usb 4-1: config 0 interface 0 has no altsetting 0 [ 398.220788][ T990] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 398.220808][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.228376][ T990] usb 4-1: config 0 descriptor?? [ 398.239425][ T990] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 398.242564][ T5929] usb 5-1: device descriptor read/64, error -71 [ 398.314724][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 398.352748][ T5929] usb usb5-port1: attempt power cycle [ 398.431017][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 398.692493][ T5929] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 398.714112][ T5929] usb 5-1: device descriptor read/8, error -71 [ 399.011538][ T8051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.032531][ T5929] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 399.054832][ T5929] usb 5-1: device descriptor read/8, error -71 [ 399.163055][ T5929] usb usb5-port1: unable to enumerate USB device [ 399.183697][ T8051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.025238][ T8051] team0: Port device team_slave_0 added [ 401.061021][ T10] usb 4-1: USB disconnect, device number 24 [ 401.161150][ T8051] team0: Port device team_slave_1 added [ 401.205110][ T8209] netlink: 32 bytes leftover after parsing attributes in process `syz.3.643'. [ 402.992879][ T8051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.992895][ T8051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.992919][ T8051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.037070][ T8051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.037087][ T8051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.037111][ T8051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.915661][ T8220] ALSA: mixer_oss: invalid OSS volume '' [ 404.502437][ T5853] Bluetooth: hci1: command 0x0405 tx timeout [ 404.672602][ T5847] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 404.709576][ T8051] hsr_slave_0: entered promiscuous mode [ 404.710919][ T8051] hsr_slave_1: entered promiscuous mode [ 404.834886][ T5847] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 404.834916][ T5847] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 404.839211][ T5847] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 404.839236][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.839254][ T5847] usb 3-1: Product: syz [ 404.839264][ T5847] usb 3-1: Manufacturer: syz [ 404.839275][ T5847] usb 3-1: SerialNumber: syz [ 404.907716][ T5847] usb 3-1: config 0 descriptor?? [ 404.908510][ T8229] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 404.908640][ T8229] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 405.052495][ T10] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 405.123721][ T8229] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 405.125943][ T8229] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 405.182474][ T10] usb 5-1: device descriptor read/64, error -71 [ 405.422427][ T10] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 405.530348][ T5847] Error reading MAC address [ 405.552474][ T10] usb 5-1: device descriptor read/64, error -71 [ 405.662868][ T10] usb usb5-port1: attempt power cycle [ 405.852483][ T9] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 405.994201][ T7954] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 406.009528][ T10] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 406.024015][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 406.024061][ T9] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.024081][ T9] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 406.024105][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 406.024136][ T9] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 406.024156][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.029276][ T9] usb 4-1: config 0 descriptor?? [ 406.093335][ T10] usb 5-1: device descriptor read/8, error -71 [ 406.107857][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 406.142077][ T7954] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 406.310827][ T7954] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 406.332483][ T10] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 406.353412][ T10] usb 5-1: device descriptor read/8, error -71 [ 406.374062][ T7954] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 406.473174][ T10] usb usb5-port1: unable to enumerate USB device [ 407.491396][ T44] usb 3-1: USB disconnect, device number 16 [ 407.953387][ T44] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 408.016991][ T7954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.030720][ T1116] bridge_slave_1: left allmulticast mode [ 408.030750][ T1116] bridge_slave_1: left promiscuous mode [ 408.031004][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.107542][ T44] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 408.107582][ T44] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 408.107604][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.136777][ T44] usb 3-1: config 0 descriptor?? [ 408.164074][ T1116] bridge_slave_0: left allmulticast mode [ 408.164104][ T1116] bridge_slave_0: left promiscuous mode [ 408.300750][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.754741][ T5847] usb 4-1: USB disconnect, device number 25 [ 410.096470][ T8289] Process accounting resumed [ 411.079355][ T8294] ALSA: mixer_oss: invalid OSS volume '' [ 411.952879][ T44] usb 3-1: USB disconnect, device number 17 [ 413.723618][ T44] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 414.235274][ T44] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 414.235304][ T44] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 414.238710][ T44] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 414.238736][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.238753][ T44] usb 4-1: Product: syz [ 414.238765][ T44] usb 4-1: Manufacturer: syz [ 414.238778][ T44] usb 4-1: SerialNumber: syz [ 414.300501][ T44] usb 4-1: config 0 descriptor?? [ 414.301583][ T8310] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 414.301852][ T8310] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 414.376347][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 414.503977][ T10] usb 3-1: device descriptor read/64, error -71 [ 414.544636][ T8310] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 414.544818][ T8310] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 414.742784][ T5914] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 414.772576][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 414.900619][ T5914] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.900639][ T5914] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 414.900661][ T5914] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 414.900672][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.909657][ T5914] usb 5-1: config 0 descriptor?? [ 414.912528][ T10] usb 3-1: device descriptor read/64, error -71 [ 414.956649][ T44] Error reading MAC address [ 415.023028][ T10] usb usb3-port1: attempt power cycle [ 415.388393][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 415.429475][ T10] usb 3-1: device descriptor read/8, error -71 [ 415.662474][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 415.683419][ T10] usb 3-1: device descriptor read/8, error -71 [ 415.733442][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.794105][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.794467][ T10] usb usb3-port1: unable to enumerate USB device [ 415.818590][ T1116] bond0 (unregistering): Released all slaves [ 416.053308][ T7954] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.118348][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.118573][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.270687][ T1508] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.270772][ T1508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.320616][ T8051] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 416.415785][ T8051] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 416.473729][ T10] usb 4-1: USB disconnect, device number 26 [ 416.572549][ T5929] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 417.694886][ T8336] Process accounting resumed [ 417.812417][ T5929] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 417.812465][ T5929] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.812486][ T5929] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 417.812510][ T5929] usb 3-1: config 0 interface 0 has no altsetting 0 [ 417.812541][ T5929] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 417.812561][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.842704][ T5929] usb 3-1: config 0 descriptor?? [ 417.878949][ T5929] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 417.921072][ T5929] usb 5-1: USB disconnect, device number 40 [ 417.939588][ T8051] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 420.337027][ T9] usb 3-1: USB disconnect, device number 22 [ 421.361523][ T8051] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 423.382547][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 423.514040][ T9] usb 5-1: device descriptor read/64, error -71 [ 423.672395][ T44] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 423.760000][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 423.780301][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 423.781385][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 423.792575][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 423.793711][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 423.800474][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 423.825849][ T44] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 423.825877][ T44] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 423.830130][ T44] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 423.830157][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.830174][ T44] usb 3-1: Product: syz [ 423.830187][ T44] usb 3-1: Manufacturer: syz [ 423.830199][ T44] usb 3-1: SerialNumber: syz [ 423.881149][ T44] usb 3-1: config 0 descriptor?? [ 423.882186][ T8368] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 423.882507][ T8368] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 423.894090][ T1116] hsr_slave_0: left promiscuous mode [ 423.922531][ T1116] hsr_slave_1: left promiscuous mode [ 423.925930][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.962512][ T9] usb 5-1: device descriptor read/64, error -71 [ 423.979860][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.046119][ T8378] fuse: Bad value for 'fd' [ 424.088332][ T9] usb usb5-port1: attempt power cycle [ 424.267338][ T8368] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 424.267466][ T8368] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 425.082502][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 425.103429][ T9] usb 5-1: device descriptor read/8, error -71 [ 425.342514][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 425.366653][ T9] usb 5-1: device descriptor read/8, error -71 [ 425.380383][ T44] Error reading MAC address [ 425.473144][ T9] usb usb5-port1: unable to enumerate USB device [ 425.552624][ T5914] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 425.729021][ T5914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.729046][ T5914] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 425.729080][ T5914] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 425.729101][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.737902][ T5914] usb 4-1: config 0 descriptor?? [ 425.862576][ T5853] Bluetooth: hci5: command tx timeout [ 426.552484][ T9] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 426.706395][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 426.706446][ T9] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.706468][ T9] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 426.706495][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 426.706526][ T9] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 426.706549][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.717198][ T9] usb 5-1: config 0 descriptor?? [ 426.741519][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 426.810213][ T5914] usb 3-1: USB disconnect, device number 23 [ 427.952536][ T5853] Bluetooth: hci5: command tx timeout [ 428.233195][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 428.309237][ T9] usb 4-1: USB disconnect, device number 27 [ 428.740399][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 430.032550][ T5853] Bluetooth: hci5: command tx timeout [ 432.102401][ T5853] Bluetooth: hci5: command tx timeout [ 432.178773][ T5914] usb 5-1: USB disconnect, device number 45 [ 433.232500][ T5914] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 433.372448][ T5914] usb 5-1: device descriptor read/64, error -71 [ 433.588129][ T8051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.626026][ T5914] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 433.722479][ T44] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 433.772637][ T5914] usb 5-1: device descriptor read/64, error -71 [ 433.807126][ T8051] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.852659][ T4358] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.853291][ T4358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.854171][ T8375] chnl_net:caif_netlink_parms(): no params data found [ 433.875289][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.875312][ T44] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 433.875345][ T44] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 433.875366][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.901646][ T44] usb 3-1: config 0 descriptor?? [ 433.958666][ T5914] usb usb5-port1: attempt power cycle [ 434.168009][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.168178][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.486097][ T5914] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 434.503164][ T5914] usb 5-1: device descriptor read/8, error -71 [ 434.575916][ C0] vkms_vblank_simulate: vblank timer overrun [ 434.893617][ T5914] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 434.954946][ T5914] usb 5-1: device descriptor read/8, error -71 [ 435.079692][ T5914] usb usb5-port1: unable to enumerate USB device [ 435.322703][ C0] vkms_vblank_simulate: vblank timer overrun [ 435.456546][ C0] vkms_vblank_simulate: vblank timer overrun [ 435.558991][ C0] vkms_vblank_simulate: vblank timer overrun [ 435.576089][ T1116] IPVS: stop unused estimator thread 0... [ 435.868810][ T8375] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.869034][ T8375] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.869256][ T8375] bridge_slave_0: entered allmulticast mode [ 435.907312][ T8375] bridge_slave_0: entered promiscuous mode [ 435.928398][ T8375] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.928560][ T8375] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.928789][ T8375] bridge_slave_1: entered allmulticast mode [ 435.966508][ T8375] bridge_slave_1: entered promiscuous mode [ 436.322642][ T31] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 436.400928][ T8375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.497187][ T31] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 436.497234][ T31] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.497255][ T31] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 436.497278][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 436.497310][ T31] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 436.497330][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.514492][ T31] usb 4-1: config 0 descriptor?? [ 436.544959][ T44] usb 3-1: USB disconnect, device number 24 [ 436.547483][ T31] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 436.818881][ T8477] random: crng reseeded on system resumption [ 437.022394][ C0] vkms_vblank_simulate: vblank timer overrun [ 437.282569][ C0] vkms_vblank_simulate: vblank timer overrun [ 437.383117][ C0] vkms_vblank_simulate: vblank timer overrun [ 437.428385][ T8375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.637634][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 437.668336][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 437.670884][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 437.698380][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 437.699737][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 438.110382][ C0] vkms_vblank_simulate: vblank timer overrun [ 439.007913][ T8375] team0: Port device team_slave_0 added [ 439.123280][ T5899] usb 4-1: USB disconnect, device number 28 [ 439.151867][ T8375] team0: Port device team_slave_1 added [ 439.792843][ T5853] Bluetooth: hci3: command tx timeout [ 440.058354][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.061024][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.144727][ C0] vkms_vblank_simulate: vblank timer overrun [ 441.002967][ C0] vkms_vblank_simulate: vblank timer overrun [ 441.231125][ T8375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.231141][ T8375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.231164][ T8375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.426941][ T8375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.426952][ T8375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.426967][ T8375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.434543][ T5899] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 441.452389][ T5914] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 441.572613][ T5899] usb 3-1: device descriptor read/64, error -71 [ 441.612368][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 441.620995][ T5914] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 441.621018][ T5914] usb 4-1: config 0 has no interface number 0 [ 441.645542][ T5914] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 441.645568][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.645586][ T5914] usb 4-1: Product: syz [ 441.645598][ T5914] usb 4-1: Manufacturer: syz [ 441.645611][ T5914] usb 4-1: SerialNumber: syz [ 441.688787][ T5914] usb 4-1: config 0 descriptor?? [ 441.701568][ T5914] smsc95xx v2.0.0 [ 441.816047][ T5899] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 441.862456][ T59] Bluetooth: hci3: command tx timeout [ 441.943868][ T5899] usb 3-1: device descriptor read/64, error -71 [ 441.952921][ T8375] hsr_slave_0: entered promiscuous mode [ 441.968960][ T8375] hsr_slave_1: entered promiscuous mode [ 441.970379][ T8375] debugfs: 'hsr0' already exists in 'hsr' [ 441.970403][ T8375] Cannot create hsr debugfs directory [ 442.055497][ T5899] usb usb3-port1: attempt power cycle [ 442.099420][ T5914] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 442.099452][ T5914] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 442.486206][ C0] vkms_vblank_simulate: vblank timer overrun [ 442.504549][ T5914] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 442.504876][ T5914] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 442.547761][ T5899] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 442.575431][ T5899] usb 3-1: device descriptor read/8, error -71 [ 442.686866][ C0] vkms_vblank_simulate: vblank timer overrun [ 442.853517][ T5899] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 442.907259][ T5899] usb 3-1: device descriptor read/8, error -71 [ 443.048044][ C0] vkms_vblank_simulate: vblank timer overrun [ 443.070608][ T5899] usb usb3-port1: unable to enumerate USB device [ 443.942512][ T59] Bluetooth: hci3: command 0x040f tx timeout [ 444.270447][ T1116] bridge_slave_1: left allmulticast mode [ 444.270480][ T1116] bridge_slave_1: left promiscuous mode [ 444.270745][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.427865][ T990] usb 4-1: USB disconnect, device number 29 [ 445.967582][ T1116] bridge_slave_0: left allmulticast mode [ 445.967616][ T1116] bridge_slave_0: left promiscuous mode [ 445.970010][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.032882][ T5853] Bluetooth: hci3: command 0x040f tx timeout [ 446.957561][ T8579] overlayfs: missing 'workdir' [ 448.104521][ T5853] Bluetooth: hci3: command 0x040f tx timeout [ 451.426772][ T5899] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 451.552493][ T5899] usb 4-1: device descriptor read/64, error -71 [ 451.792580][ T5899] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 451.931554][ T5899] usb 4-1: device descriptor read/64, error -71 [ 451.963269][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.023939][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.041161][ T5899] usb usb4-port1: attempt power cycle [ 452.056990][ T1116] bond0 (unregistering): Released all slaves [ 452.372445][ T5899] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 452.393235][ T5899] usb 4-1: device descriptor read/8, error -71 [ 452.632640][ T5899] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 452.653317][ T5899] usb 4-1: device descriptor read/8, error -71 [ 452.765598][ T5899] usb usb4-port1: unable to enumerate USB device [ 452.812516][ T1116] hsr_slave_0: left promiscuous mode [ 452.832494][ T1116] hsr_slave_1: left promiscuous mode [ 452.833414][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.873350][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.922613][ T990] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 453.072522][ T990] usb 3-1: Using ep0 maxpacket: 32 [ 453.075892][ T990] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 453.075916][ T990] usb 3-1: config 0 has no interface number 0 [ 453.080523][ T990] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 453.080548][ T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.080566][ T990] usb 3-1: Product: syz [ 453.080578][ T990] usb 3-1: Manufacturer: syz [ 453.080590][ T990] usb 3-1: SerialNumber: syz [ 453.095090][ T990] usb 3-1: config 0 descriptor?? [ 453.126305][ T990] smsc95xx v2.0.0 [ 453.553041][ T990] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 453.553071][ T990] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 453.758373][ T990] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 453.758559][ T990] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 453.824710][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 453.973360][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 454.562815][ T5914] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 454.717055][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.717101][ T5914] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 454.717121][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.774474][ T5914] usb 4-1: config 0 descriptor?? [ 454.988922][ T5914] usbhid 4-1:0.0: can't add hid device: -71 [ 454.989044][ T5914] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 455.027027][ T5914] usb 4-1: USB disconnect, device number 34 [ 455.672751][ T44] usb 3-1: USB disconnect, device number 29 [ 456.087283][ C1] vkms_vblank_simulate: vblank timer overrun [ 456.781650][ C1] vkms_vblank_simulate: vblank timer overrun [ 457.058220][ C1] vkms_vblank_simulate: vblank timer overrun [ 457.224728][ C1] vkms_vblank_simulate: vblank timer overrun [ 457.290401][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. [ 457.476867][ T8480] chnl_net:caif_netlink_parms(): no params data found [ 460.665885][ T8683] binder: 8678:8683 ioctl 4018620d 0 returned -22 [ 462.020583][ T8480] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.021116][ T8480] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.021961][ T8480] bridge_slave_0: entered allmulticast mode [ 462.161137][ T8480] bridge_slave_0: entered promiscuous mode [ 462.438668][ T8480] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.438809][ T8480] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.439060][ T8480] bridge_slave_1: entered allmulticast mode [ 462.478277][ T8480] bridge_slave_1: entered promiscuous mode [ 462.652740][ T31] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 462.662877][ T5914] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 462.782516][ T5847] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 462.806664][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.806721][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 462.806761][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 462.806781][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.816082][ T5914] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 462.816111][ T5914] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 462.819348][ T5914] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 462.819372][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.819390][ T5914] usb 5-1: Product: syz [ 462.819402][ T5914] usb 5-1: Manufacturer: syz [ 462.819414][ T5914] usb 5-1: SerialNumber: syz [ 462.830282][ T31] usb 4-1: config 0 descriptor?? [ 462.837814][ T31] hub 4-1:0.0: bad descriptor, ignoring hub [ 462.837850][ T31] hub 4-1:0.0: probe with driver hub failed with error -5 [ 462.844752][ T5914] usb 5-1: config 0 descriptor?? [ 462.845715][ T8687] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 462.845938][ T8687] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 462.854901][ T31] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 462.951346][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.951393][ T5847] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 462.951464][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.998980][ T8480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.004626][ T5847] usb 3-1: config 0 descriptor?? [ 463.068677][ T8480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.094742][ T8687] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 463.095609][ T8687] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 463.238605][ T5847] usbhid 3-1:0.0: can't add hid device: -71 [ 463.239497][ T5847] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 463.252178][ T5847] usb 3-1: USB disconnect, device number 30 [ 463.387565][ T8480] team0: Port device team_slave_0 added [ 463.499329][ T5914] Error reading MAC address [ 463.545380][ T8480] team0: Port device team_slave_1 added [ 463.978897][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.978913][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.978953][ T8480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.002820][ T8697] tipc: Started in network mode [ 465.002842][ T8697] tipc: Node identity 4, cluster identity 4711 [ 465.002854][ T8697] tipc: Node number set to 4 [ 465.013610][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.013625][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.013651][ T8480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.187147][ T8700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.724'. [ 465.460858][ T5914] usb 5-1: USB disconnect, device number 50 [ 465.523048][ T5847] usb 4-1: USB disconnect, device number 35 [ 468.281251][ T8480] hsr_slave_0: entered promiscuous mode [ 468.288883][ T8480] hsr_slave_1: entered promiscuous mode [ 468.289861][ T8480] debugfs: 'hsr0' already exists in 'hsr' [ 468.289883][ T8480] Cannot create hsr debugfs directory [ 468.444695][ T8375] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 468.526792][ T8375] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 470.425687][ T8729] random: crng reseeded on system resumption [ 470.542878][ T8375] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 471.138598][ T5847] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 471.243493][ T8375] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 471.309425][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.309455][ T5847] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 471.309474][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.406090][ T5847] usb 5-1: config 0 descriptor?? [ 471.641039][ T5847] usbhid 5-1:0.0: can't add hid device: -71 [ 471.641163][ T5847] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 471.650112][ T5847] usb 5-1: USB disconnect, device number 51 [ 472.142455][ T5847] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 472.309283][ T5847] usb 5-1: Using ep0 maxpacket: 16 [ 472.377326][ C1] vkms_vblank_simulate: vblank timer overrun [ 472.447613][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.447831][ T5847] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 472.447880][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.190233][ C1] vkms_vblank_simulate: vblank timer overrun [ 473.312801][ C1] vkms_vblank_simulate: vblank timer overrun [ 473.313840][ T5847] usb 5-1: config 0 descriptor?? [ 473.949243][ T5847] usbhid 5-1:0.0: can't add hid device: -71 [ 473.949319][ T5847] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 473.985365][ T5847] usb 5-1: USB disconnect, device number 52 [ 476.522200][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.131274][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.277571][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.484878][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.671116][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.892007][ C1] vkms_vblank_simulate: vblank timer overrun [ 478.258131][ T1116] bridge_slave_1: left allmulticast mode [ 478.258164][ T1116] bridge_slave_1: left promiscuous mode [ 478.258431][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.366136][ C1] vkms_vblank_simulate: vblank timer overrun [ 478.562366][ C1] vkms_vblank_simulate: vblank timer overrun [ 478.649249][ T1116] bridge_slave_0: left allmulticast mode [ 478.649330][ T1116] bridge_slave_0: left promiscuous mode [ 478.650507][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.962455][ T31] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 479.122673][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 479.137858][ T31] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 479.137896][ T31] usb 5-1: config 0 has no interface number 1 [ 479.137961][ T31] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 479.137981][ T31] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 479.138003][ T31] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 479.138026][ T31] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 479.138046][ T31] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 479.138085][ T31] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 479.138107][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9053, setting to 1024 [ 479.138128][ T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 479.141181][ T31] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 479.141207][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.141224][ T31] usb 5-1: Product: syz [ 479.141237][ T31] usb 5-1: Manufacturer: syz [ 479.141249][ T31] usb 5-1: SerialNumber: syz [ 479.349193][ T31] usb 5-1: config 0 descriptor?? [ 479.386570][ T8798] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 479.432044][ T31] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 479.464983][ T31] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 479.818644][ T31] usb 5-1: USB disconnect, device number 53 [ 480.124036][ T8806] udevd[8806]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 480.232502][ T990] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 481.374734][ T990] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 481.374765][ T990] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 481.377593][ T990] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 481.377619][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.377637][ T990] usb 4-1: Product: syz [ 481.377649][ T990] usb 4-1: Manufacturer: syz [ 481.377662][ T990] usb 4-1: SerialNumber: syz [ 481.447926][ T990] usb 4-1: config 0 descriptor?? [ 481.449143][ T8802] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 481.449350][ T8802] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 481.724159][ T8802] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 481.726476][ T8802] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 482.164986][ T990] Error reading MAC address [ 483.592560][ T31] usb 4-1: USB disconnect, device number 36 [ 484.088188][ T8828] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 484.088250][ T8828] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 484.092031][ T8828] vhci_hcd vhci_hcd.0: Device attached [ 484.248703][ T8829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.372664][ T31] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 484.759710][ T8831] vhci_hcd: connection reset by peer [ 484.790816][ T1488] vhci_hcd: stop threads [ 484.790880][ T1488] vhci_hcd: release socket [ 484.818424][ T1488] vhci_hcd: disconnect device [ 485.384128][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.702786][ T990] IPVS: starting estimator thread 0... [ 485.812861][ T8843] IPVS: using max 6 ests per chain, 14400 per kthread [ 485.908478][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 485.945530][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 485.947382][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 485.958077][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 485.969912][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.987457][ T990] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 485.998170][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 486.476135][ T8850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.751'. [ 487.030395][ T1116] bond0 (unregistering): Released all slaves [ 487.074740][ T990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.074787][ T990] usb 4-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 487.074807][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.084566][ T990] usb 4-1: config 0 descriptor?? [ 487.560531][ T990] usbhid 4-1:0.0: can't add hid device: -71 [ 487.560653][ T990] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 487.590150][ T990] usb 4-1: USB disconnect, device number 37 [ 487.602385][ T5914] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 487.754752][ T5914] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 487.754781][ T5914] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 487.759425][ T5914] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 487.759451][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.759467][ T5914] usb 3-1: Product: syz [ 487.759479][ T5914] usb 3-1: Manufacturer: syz [ 487.759489][ T5914] usb 3-1: SerialNumber: syz [ 488.094966][ T5914] usb 3-1: config 0 descriptor?? [ 488.095763][ T8854] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 488.095924][ T8854] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 488.831064][ T8854] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 488.831203][ T8854] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 489.062721][ T5853] Bluetooth: hci1: command tx timeout [ 489.177694][ T1116] hsr_slave_0: left promiscuous mode [ 489.212454][ T1116] hsr_slave_1: left promiscuous mode [ 489.213837][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.264965][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.385496][ T5914] Error reading MAC address [ 489.542497][ T31] vhci_hcd: vhci_device speed not set [ 490.366153][ T8883] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 490.366265][ T8883] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 490.380470][ T8883] vhci_hcd vhci_hcd.0: Device attached [ 490.559179][ T8886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 490.738376][ T10] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 491.101328][ T8884] vhci_hcd: connection reset by peer [ 491.136421][ T3587] vhci_hcd: stop threads [ 491.136476][ T3587] vhci_hcd: release socket [ 491.138327][ T3587] vhci_hcd: disconnect device [ 491.142679][ T5853] Bluetooth: hci1: command tx timeout [ 491.429351][ T5929] usb 3-1: USB disconnect, device number 31 [ 492.263561][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 493.243504][ T5853] Bluetooth: hci1: command tx timeout [ 493.346834][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 493.423473][ T31] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 493.502457][ T5847] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 493.661893][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.661938][ T31] usb 3-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 493.661958][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.698211][ T31] usb 3-1: config 0 descriptor?? [ 494.610734][ T5847] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.610793][ T5847] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 494.610901][ T5847] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 494.610923][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.677872][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.766'. [ 494.683859][ T5847] usb 4-1: config 0 descriptor?? [ 494.705349][ T5847] hub 4-1:0.0: bad descriptor, ignoring hub [ 494.705386][ T5847] hub 4-1:0.0: probe with driver hub failed with error -5 [ 494.760279][ T5847] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 494.782035][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.766'. [ 494.820262][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 494.820386][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 494.829618][ T31] usb 3-1: USB disconnect, device number 32 [ 495.303790][ T5853] Bluetooth: hci1: command tx timeout [ 495.662600][ T31] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 495.853532][ T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 495.853563][ T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 495.856912][ T31] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 495.856938][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.856955][ T31] usb 3-1: Product: syz [ 495.856968][ T31] usb 3-1: Manufacturer: syz [ 495.856980][ T31] usb 3-1: SerialNumber: syz [ 495.865541][ T31] usb 3-1: config 0 descriptor?? [ 495.866597][ T8917] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 495.866868][ T8917] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 496.016843][ T10] vhci_hcd: vhci_device speed not set [ 496.082452][ T8917] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 496.082793][ T8917] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 496.352985][ T5929] usb 4-1: USB disconnect, device number 38 [ 496.486770][ T31] Error reading MAC address [ 496.535621][ T8921] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 496.535644][ T8921] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 496.535708][ T8921] vhci_hcd vhci_hcd.0: Device attached [ 496.700401][ T8924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.802477][ T31] usb 39-1: new high-speed USB device number 4 using vhci_hcd [ 497.194348][ T8922] vhci_hcd: connection reset by peer [ 497.224569][ T3614] vhci_hcd: stop threads [ 497.224587][ T3614] vhci_hcd: release socket [ 497.224794][ T3614] vhci_hcd: disconnect device [ 498.396396][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 498.418815][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 498.422993][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 498.434028][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 498.438229][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 498.640804][ T10] usb 3-1: USB disconnect, device number 33 [ 499.637120][ T8846] chnl_net:caif_netlink_parms(): no params data found [ 500.209093][ C0] vkms_vblank_simulate: vblank timer overrun [ 500.585488][ T5853] Bluetooth: hci5: command tx timeout [ 501.045238][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.196487][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.493168][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.495433][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.913782][ C0] vkms_vblank_simulate: vblank timer overrun [ 502.162856][ T31] vhci_hcd: vhci_device speed not set [ 502.416962][ C0] vkms_vblank_simulate: vblank timer overrun [ 502.662490][ T5853] Bluetooth: hci5: command tx timeout [ 502.825048][ C0] vkms_vblank_simulate: vblank timer overrun [ 503.040459][ T8979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.983409][ T8977] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 503.983480][ T8977] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 503.985529][ T8980] vhci_hcd: connection closed [ 503.995685][ T8977] vhci_hcd vhci_hcd.0: Device attached [ 504.413376][ T1116] vhci_hcd: stop threads [ 504.413428][ T1116] vhci_hcd: release socket [ 504.415989][ T1116] vhci_hcd: disconnect device [ 504.752445][ T5853] Bluetooth: hci5: command tx timeout [ 506.528136][ T8987] block nbd3: NBD_DISCONNECT [ 506.832422][ T59] Bluetooth: hci5: command tx timeout [ 506.998322][ T8987] block nbd3: Disconnected due to user request. [ 507.019059][ T8987] block nbd3: shutting down sockets [ 509.783561][ T8846] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.783644][ T8846] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.783807][ T8846] bridge_slave_0: entered allmulticast mode [ 509.788264][ T8846] bridge_slave_0: entered promiscuous mode [ 509.822087][ T8846] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.822167][ T8846] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.837056][ T8846] bridge_slave_1: entered allmulticast mode [ 509.849282][ T8846] bridge_slave_1: entered promiscuous mode [ 510.402058][ T9006] 9pnet_virtio: no channels available for device syz [ 511.435747][ T8846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.494480][ T8846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.503141][ T9017] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 516.503373][ T9017] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 516.503756][ T9017] vhci_hcd vhci_hcd.0: Device attached [ 516.636825][ T9020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.826013][ T9018] vhci_hcd: connection closed [ 516.847935][ T3587] vhci_hcd: stop threads [ 516.847986][ T3587] vhci_hcd: release socket [ 516.851692][ T3587] vhci_hcd: disconnect device [ 516.908856][ T10] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 516.911750][ T10] usb 41-1: enqueue for inactive port 0 [ 517.013198][ T10] vhci_hcd: vhci_device speed not set [ 517.571986][ T8846] team0: Port device team_slave_0 added [ 518.502911][ T9032] tipc: Started in network mode [ 518.502932][ T9032] tipc: Node identity 4, cluster identity 4711 [ 518.502943][ T9032] tipc: Node number set to 4 [ 518.578005][ T8846] team0: Port device team_slave_1 added [ 519.167097][ T8940] chnl_net:caif_netlink_parms(): no params data found [ 519.180345][ T8846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.180359][ T8846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.180381][ T8846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.333042][ T8846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.333053][ T8846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.333068][ T8846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.454710][ T9046] cgroup: fork rejected by pids controller in /syz4 [ 520.509506][ T8846] hsr_slave_0: entered promiscuous mode [ 520.520388][ T8846] hsr_slave_1: entered promiscuous mode [ 520.892631][ T8940] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.892768][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.893018][ T8940] bridge_slave_0: entered allmulticast mode [ 520.895736][ T8940] bridge_slave_0: entered promiscuous mode [ 521.216709][ T8940] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.216856][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.217058][ T8940] bridge_slave_1: entered allmulticast mode [ 521.265888][ T8940] bridge_slave_1: entered promiscuous mode [ 521.852624][ T1508] bridge_slave_1: left allmulticast mode [ 521.852658][ T1508] bridge_slave_1: left promiscuous mode [ 521.852928][ T1508] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.884027][ T1508] bridge_slave_0: left allmulticast mode [ 522.884059][ T1508] bridge_slave_0: left promiscuous mode [ 522.884337][ T1508] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.252182][ T9162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.280014][ T9158] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 523.280078][ T9158] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 523.280472][ T9158] vhci_hcd vhci_hcd.0: Device attached [ 528.319390][ T9159] vhci_hcd: connection closed [ 528.322826][ T1416] vhci_hcd: stop threads [ 528.322844][ T1416] vhci_hcd: release socket [ 528.324157][ T1416] vhci_hcd: disconnect device [ 528.347320][ T1508] bridge_slave_1: left allmulticast mode [ 528.347350][ T1508] bridge_slave_1: left promiscuous mode [ 528.347592][ T1508] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.372388][ T990] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 528.372486][ T990] usb 37-1: enqueue for inactive port 0 [ 528.442475][ T990] vhci_hcd: vhci_device speed not set [ 528.616793][ T1508] bridge_slave_0: left allmulticast mode [ 528.616823][ T1508] bridge_slave_0: left promiscuous mode [ 528.617071][ T1508] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.487068][ T1508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.605418][ T1508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.685436][ T1508] bond0 (unregistering): Released all slaves [ 530.318229][ C1] vkms_vblank_simulate: vblank timer overrun [ 530.815684][ C1] vkms_vblank_simulate: vblank timer overrun [ 530.947025][ C1] vkms_vblank_simulate: vblank timer overrun [ 531.045685][ C1] vkms_vblank_simulate: vblank timer overrun [ 531.203829][ T9204] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.813'. [ 531.483424][ T1508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.593482][ T1508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.673322][ T1508] bond0 (unregistering): Released all slaves [ 532.009989][ T8940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.030824][ T9204] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç' [ 532.030838][ T9204] CPU: 1 UID: 0 PID: 9204 Comm: syz.2.813 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 532.030851][ T9204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 532.030858][ T9204] Call Trace: [ 532.030862][ T9204] [ 532.030867][ T9204] dump_stack_lvl+0x189/0x250 [ 532.030887][ T9204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.030902][ T9204] ? __pfx__printk+0x10/0x10 [ 532.030914][ T9204] ? kernfs_path_from_node+0x2c/0x280 [ 532.030927][ T9204] ? kernfs_path_from_node+0x2c/0x280 [ 532.030936][ T9204] ? kernfs_path_from_node+0x243/0x280 [ 532.030945][ T9204] ? kernfs_path_from_node+0x2c/0x280 [ 532.030957][ T9204] sysfs_warn_dup+0x8e/0xa0 [ 532.030971][ T9204] sysfs_do_create_link_sd+0xc0/0x110 [ 532.030982][ T9204] device_add_class_symlinks+0x1d2/0x240 [ 532.030999][ T9204] device_add+0x475/0xb50 [ 532.031015][ T9204] wiphy_register+0x1ba6/0x28d0 [ 532.031037][ T9204] ? __pfx_wiphy_register+0x10/0x10 [ 532.031048][ T9204] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 532.031066][ T9204] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 532.031084][ T9204] ieee80211_register_hw+0x3425/0x4080 [ 532.031108][ T9204] ? ieee80211_register_hw+0x14a1/0x4080 [ 532.031127][ T9204] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 532.031143][ T9204] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 532.031161][ T9204] ? __hrtimer_setup+0x18a/0x200 [ 532.031173][ T9204] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 532.031188][ T9204] mac80211_hwsim_new_radio+0x2c76/0x4e30 [ 532.031209][ T9204] ? mac80211_hwsim_new_radio+0x10b/0x4e30 [ 532.031228][ T9204] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 532.031239][ T9204] ? trace_kmalloc+0x1f/0xd0 [ 532.031251][ T9204] ? kstrndup+0xbf/0x160 [ 532.031270][ T9204] hwsim_new_radio_nl+0xea4/0x1b10 [ 532.031283][ T9204] ? __pfx___nla_validate_parse+0x10/0x10 [ 532.031305][ T9204] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 532.031317][ T9204] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 532.031336][ T9204] ? __nla_parse+0x40/0x60 [ 532.031351][ T9204] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 532.031369][ T9204] genl_family_rcv_msg_doit+0x215/0x300 [ 532.031387][ T9204] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 532.031408][ T9204] ? bpf_lsm_capable+0x9/0x20 [ 532.031419][ T9204] ? security_capable+0x7e/0x2e0 [ 532.031436][ T9204] genl_rcv_msg+0x60e/0x790 [ 532.031459][ T9204] ? __pfx_genl_rcv_msg+0x10/0x10 [ 532.031472][ T9204] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 532.031485][ T9204] ? __lock_acquire+0xab9/0xd20 [ 532.031504][ T9204] netlink_rcv_skb+0x205/0x470 [ 532.031517][ T9204] ? __pfx_genl_rcv_msg+0x10/0x10 [ 532.031531][ T9204] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 532.031551][ T9204] ? netlink_deliver_tap+0x2e/0x1b0 [ 532.031562][ T9204] ? netlink_deliver_tap+0x2e/0x1b0 [ 532.031575][ T9204] genl_rcv+0x28/0x40 [ 532.031587][ T9204] netlink_unicast+0x843/0xa10 [ 532.031602][ T9204] ? __pfx_netlink_unicast+0x10/0x10 [ 532.031614][ T9204] ? netlink_sendmsg+0x642/0xb30 [ 532.031623][ T9204] ? skb_put+0x11b/0x210 [ 532.031638][ T9204] netlink_sendmsg+0x805/0xb30 [ 532.031655][ T9204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.031671][ T9204] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 532.031681][ T9204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.031693][ T9204] __sock_sendmsg+0x219/0x270 [ 532.031705][ T9204] ____sys_sendmsg+0x508/0x820 [ 532.031722][ T9204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 532.031740][ T9204] ? import_iovec+0x74/0xa0 [ 532.031756][ T9204] ___sys_sendmsg+0x21f/0x2a0 [ 532.031770][ T9204] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.031805][ T9204] ? __fget_files+0x2a/0x420 [ 532.031817][ T9204] ? __fget_files+0x3a6/0x420 [ 532.031835][ T9204] __x64_sys_sendmsg+0x1a1/0x260 [ 532.031850][ T9204] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 532.031869][ T9204] ? rcu_is_watching+0x15/0xb0 [ 532.031886][ T9204] ? do_syscall_64+0xbe/0x3b0 [ 532.031901][ T9204] do_syscall_64+0xfa/0x3b0 [ 532.031912][ T9204] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.031923][ T9204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.031933][ T9204] ? clear_bhb_loop+0x60/0xb0 [ 532.031945][ T9204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.031954][ T9204] RIP: 0033:0x7f9433a4ebe9 [ 532.031965][ T9204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.031973][ T9204] RSP: 002b:00007f9431851038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.031985][ T9204] RAX: ffffffffffffffda RBX: 00007f9433c76270 RCX: 00007f9433a4ebe9 [ 532.031993][ T9204] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000008 [ 532.032000][ T9204] RBP: 00007f9433ad1e19 R08: 0000000000000000 R09: 0000000000000000 [ 532.032006][ T9204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.032012][ T9204] R13: 00007f9433c76308 R14: 00007f9433c76270 R15: 00007ffe4fb3ef18 [ 532.032030][ T9204] [ 532.138690][ T9210] netlink: 32 bytes leftover after parsing attributes in process `syz.3.817'. [ 532.352582][ T9200] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 532.352706][ T9200] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 532.352807][ T9200] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 532.352849][ T9200] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 532.459985][ T8940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.485862][ T9200] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 532.568331][ T9200] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 532.568378][ T9200] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 532.694865][ T9200] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 532.828582][ T8940] team0: Port device team_slave_0 added [ 533.058040][ T1508] hsr_slave_0: left promiscuous mode [ 533.062532][ T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 533.102615][ T1508] hsr_slave_1: left promiscuous mode [ 533.103573][ T1508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.148941][ T1508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.192409][ T9] usb 5-1: device descriptor read/64, error -71 [ 533.355757][ T1508] hsr_slave_0: left promiscuous mode [ 533.418907][ T1508] hsr_slave_1: left promiscuous mode [ 533.419902][ T1508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.432456][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 533.473344][ T1508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.565660][ T9] usb 5-1: device descriptor read/64, error -71 [ 533.677856][ T9] usb usb5-port1: attempt power cycle [ 534.032517][ T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 534.063115][ T9] usb 5-1: device descriptor read/8, error -71 [ 534.243887][ C1] vkms_vblank_simulate: vblank timer overrun [ 534.302447][ T9] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 534.306666][ T9244] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 534.422393][ T5858] Bluetooth: hci1: command 0x0c1a tx timeout [ 534.422616][ T5858] Bluetooth: hci0: command 0x0c1a tx timeout [ 534.433025][ T5853] Bluetooth: hci2: command 0x0c1a tx timeout [ 534.512486][ T9] usb 5-1: device not accepting address 57, error -71 [ 534.512878][ T9] usb usb5-port1: unable to enumerate USB device [ 534.582397][ T5853] Bluetooth: hci5: command 0x0c1a tx timeout [ 534.596419][ C1] vkms_vblank_simulate: vblank timer overrun [ 534.610375][ T9250] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.827'. [ 534.934670][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.051697][ T1508] team0 (unregistering): Port device team_slave_1 removed [ 535.193252][ T1508] team0 (unregistering): Port device team_slave_0 removed [ 536.383202][ T1508] team0 (unregistering): Port device team_slave_1 removed [ 536.502616][ T5853] Bluetooth: hci1: command 0x0c1a tx timeout [ 536.519968][ T1508] team0 (unregistering): Port device team_slave_0 removed [ 536.662686][ T5853] Bluetooth: hci5: command 0x0c1a tx timeout [ 537.261370][ T8940] team0: Port device team_slave_1 added [ 537.385233][ T9248] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 537.385458][ T9248] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 537.385681][ T9248] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 537.386427][ T9248] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 537.709276][ T9250] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç' [ 537.709294][ T9250] CPU: 0 UID: 0 PID: 9250 Comm: syz.4.827 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 537.709306][ T9250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 537.709313][ T9250] Call Trace: [ 537.709318][ T9250] [ 537.709323][ T9250] dump_stack_lvl+0x189/0x250 [ 537.709345][ T9250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.709359][ T9250] ? __pfx__printk+0x10/0x10 [ 537.709370][ T9250] ? kernfs_path_from_node+0x2c/0x280 [ 537.709383][ T9250] ? kernfs_path_from_node+0x2c/0x280 [ 537.709392][ T9250] ? kernfs_path_from_node+0x243/0x280 [ 537.709400][ T9250] ? kernfs_path_from_node+0x2c/0x280 [ 537.709412][ T9250] sysfs_warn_dup+0x8e/0xa0 [ 537.709425][ T9250] sysfs_do_create_link_sd+0xc0/0x110 [ 537.709436][ T9250] device_add_class_symlinks+0x1d2/0x240 [ 537.709452][ T9250] device_add+0x475/0xb50 [ 537.709467][ T9250] wiphy_register+0x1ba6/0x28d0 [ 537.709489][ T9250] ? __pfx_wiphy_register+0x10/0x10 [ 537.709499][ T9250] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 537.709517][ T9250] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 537.709534][ T9250] ieee80211_register_hw+0x3425/0x4080 [ 537.709558][ T9250] ? ieee80211_register_hw+0x14a1/0x4080 [ 537.709576][ T9250] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 537.709593][ T9250] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 537.709610][ T9250] ? __hrtimer_setup+0x18a/0x200 [ 537.709622][ T9250] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 537.709636][ T9250] mac80211_hwsim_new_radio+0x2c76/0x4e30 [ 537.709655][ T9250] ? mac80211_hwsim_new_radio+0x10b/0x4e30 [ 537.709674][ T9250] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 537.709684][ T9250] ? trace_kmalloc+0x1f/0xd0 [ 537.709697][ T9250] ? kstrndup+0xbf/0x160 [ 537.709716][ T9250] hwsim_new_radio_nl+0xea4/0x1b10 [ 537.709728][ T9250] ? __pfx___nla_validate_parse+0x10/0x10 [ 537.709750][ T9250] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 537.709763][ T9250] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 537.709781][ T9250] ? __nla_parse+0x40/0x60 [ 537.709797][ T9250] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 537.709815][ T9250] genl_family_rcv_msg_doit+0x215/0x300 [ 537.709836][ T9250] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 537.709857][ T9250] ? bpf_lsm_capable+0x9/0x20 [ 537.709868][ T9250] ? security_capable+0x7e/0x2e0 [ 537.709885][ T9250] genl_rcv_msg+0x60e/0x790 [ 537.709902][ T9250] ? __pfx_genl_rcv_msg+0x10/0x10 [ 537.709915][ T9250] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 537.709927][ T9250] ? __lock_acquire+0xab9/0xd20 [ 537.709945][ T9250] netlink_rcv_skb+0x205/0x470 [ 537.709956][ T9250] ? __pfx_genl_rcv_msg+0x10/0x10 [ 537.709970][ T9250] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 537.709990][ T9250] ? netlink_deliver_tap+0x2e/0x1b0 [ 537.710001][ T9250] ? netlink_deliver_tap+0x2e/0x1b0 [ 537.710014][ T9250] genl_rcv+0x28/0x40 [ 537.710026][ T9250] netlink_unicast+0x843/0xa10 [ 537.710042][ T9250] ? __pfx_netlink_unicast+0x10/0x10 [ 537.710053][ T9250] ? netlink_sendmsg+0x642/0xb30 [ 537.710063][ T9250] ? skb_put+0x11b/0x210 [ 537.710084][ T9250] netlink_sendmsg+0x805/0xb30 [ 537.710102][ T9250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.710119][ T9250] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 537.710128][ T9250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.710141][ T9250] __sock_sendmsg+0x219/0x270 [ 537.710155][ T9250] ____sys_sendmsg+0x508/0x820 [ 537.710172][ T9250] ? __pfx_____sys_sendmsg+0x10/0x10 [ 537.710190][ T9250] ? import_iovec+0x74/0xa0 [ 537.710204][ T9250] ___sys_sendmsg+0x21f/0x2a0 [ 537.710218][ T9250] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.710253][ T9250] ? __fget_files+0x2a/0x420 [ 537.710265][ T9250] ? __fget_files+0x3a6/0x420 [ 537.710283][ T9250] __x64_sys_sendmsg+0x1a1/0x260 [ 537.710298][ T9250] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 537.710317][ T9250] ? rcu_is_watching+0x15/0xb0 [ 537.710334][ T9250] ? do_syscall_64+0xbe/0x3b0 [ 537.710349][ T9250] do_syscall_64+0xfa/0x3b0 [ 537.710359][ T9250] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.710371][ T9250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.710380][ T9250] ? clear_bhb_loop+0x60/0xb0 [ 537.710392][ T9250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.710402][ T9250] RIP: 0033:0x7f380a88ebe9 [ 537.710412][ T9250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.710420][ T9250] RSP: 002b:00007f3808691038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.710432][ T9250] RAX: ffffffffffffffda RBX: 00007f380aab6270 RCX: 00007f380a88ebe9 [ 537.710439][ T9250] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000008 [ 537.710446][ T9250] RBP: 00007f380a911e19 R08: 0000000000000000 R09: 0000000000000000 [ 537.710452][ T9250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.710458][ T9250] R13: 00007f380aab6308 R14: 00007f380aab6270 R15: 00007ffcfdb33288 [ 537.710476][ T9250] [ 538.573332][ T8940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.573349][ T8940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.573373][ T8940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.693638][ T8940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.693654][ T8940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.693681][ T8940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.463038][ T5858] Bluetooth: hci5: command 0x0c1a tx timeout [ 539.463073][ T5858] Bluetooth: hci1: command 0x0c1a tx timeout [ 539.463094][ T5858] Bluetooth: hci2: command 0x0c1a tx timeout [ 539.463117][ T5858] Bluetooth: hci0: command 0x0c1a tx timeout [ 540.062393][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 540.192416][ T9] usb 3-1: device descriptor read/64, error -71 [ 540.456257][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 540.476245][ T8940] hsr_slave_0: entered promiscuous mode [ 540.481532][ T8940] hsr_slave_1: entered promiscuous mode [ 540.502399][ T8940] debugfs: 'hsr0' already exists in 'hsr' [ 540.502428][ T8940] Cannot create hsr debugfs directory [ 540.632652][ T9] usb 3-1: device descriptor read/64, error -71 [ 540.743233][ T9] usb usb3-port1: attempt power cycle [ 541.212427][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 541.233318][ T9] usb 3-1: device descriptor read/8, error -71 [ 541.472561][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 541.503417][ T9] usb 3-1: device descriptor read/8, error -71 [ 542.292383][ T9] usb usb3-port1: unable to enumerate USB device [ 546.182504][ T31] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 546.334806][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.334852][ T31] usb 5-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 546.334872][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.401718][ T31] usb 5-1: config 0 descriptor?? [ 547.032984][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 547.033105][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 547.044797][ T31] usb 5-1: USB disconnect, device number 58 [ 547.276578][ T8940] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 547.452486][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 547.480477][ T5858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 547.500333][ T5858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 547.501687][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 547.522049][ T5858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 547.555780][ T5858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 548.419996][ T8940] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 548.462416][ T9] usb 4-1: device descriptor read/64, error -71 [ 548.702381][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 548.834357][ T9] usb 4-1: device descriptor read/64, error -71 [ 548.862935][ T8940] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 548.925376][ T8940] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 548.947163][ T9] usb usb4-port1: attempt power cycle [ 549.285463][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 549.309100][ T9] usb 4-1: device descriptor read/8, error -71 [ 549.542561][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 549.564946][ T9] usb 4-1: device descriptor read/8, error -71 [ 549.773317][ T9] usb usb4-port1: unable to enumerate USB device [ 550.880937][ T5853] Bluetooth: hci3: command tx timeout [ 552.473835][ T8940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.531900][ T9362] chnl_net:caif_netlink_parms(): no params data found [ 552.902393][ T5853] Bluetooth: hci3: command tx timeout [ 553.518090][ T9459] ALSA: mixer_oss: invalid OSS volume '' [ 553.567096][ T8940] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.373981][ T3587] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.374133][ T3587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.376900][ T9362] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.377043][ T9362] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.377242][ T9362] bridge_slave_0: entered allmulticast mode [ 554.432706][ T9362] bridge_slave_0: entered promiscuous mode [ 554.456709][ T9362] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.456852][ T9362] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.457061][ T9362] bridge_slave_1: entered allmulticast mode [ 554.500473][ T9362] bridge_slave_1: entered promiscuous mode [ 554.538155][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.542501][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.759322][ T1508] bridge_slave_1: left allmulticast mode [ 554.759356][ T1508] bridge_slave_1: left promiscuous mode [ 554.759605][ T1508] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.982520][ T5853] Bluetooth: hci3: command tx timeout [ 555.013958][ T1508] bridge_slave_0: left allmulticast mode [ 555.013991][ T1508] bridge_slave_0: left promiscuous mode [ 555.014249][ T1508] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.098305][ T9478] random: crng reseeded on system resumption [ 556.513276][ T1508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.653237][ T1508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.684600][ T5929] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 556.767186][ T1508] bond0 (unregistering): Released all slaves [ 556.812575][ T5929] usb 3-1: device descriptor read/64, error -71 [ 557.062565][ T5853] Bluetooth: hci3: command tx timeout [ 557.091417][ T9362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.098038][ T5929] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 557.118341][ T9362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.272452][ T5929] usb 3-1: device descriptor read/64, error -71 [ 557.382893][ T5929] usb usb3-port1: attempt power cycle [ 557.874678][ T5929] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 557.965377][ T5929] usb 3-1: device descriptor read/8, error -71 [ 557.988039][ T9362] team0: Port device team_slave_0 added [ 558.202443][ T5929] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 558.223136][ T5929] usb 3-1: device descriptor read/8, error -71 [ 558.332937][ T5929] usb usb3-port1: unable to enumerate USB device [ 558.421423][ T1508] hsr_slave_0: left promiscuous mode [ 558.522171][ T9518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.879'. [ 558.556418][ T9518] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 559.280981][ T1508] hsr_slave_1: left promiscuous mode [ 559.296380][ T1508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.463317][ T1508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.105840][ T5847] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 560.641948][ T5847] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 560.641995][ T5847] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.642017][ T5847] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 560.642041][ T5847] usb 5-1: config 0 interface 0 has no altsetting 0 [ 560.642073][ T5847] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 560.642093][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.716747][ T5847] usb 5-1: config 0 descriptor?? [ 560.759104][ T5847] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 561.178444][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 561.193666][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 561.196199][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 561.199770][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 561.200636][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 562.403174][ T1508] team0 (unregistering): Port device team_slave_1 removed [ 562.492568][ T9543] ALSA: mixer_oss: invalid OSS volume '' [ 562.583152][ T1508] team0 (unregistering): Port device team_slave_0 removed [ 562.917954][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.918029][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.247274][ T5858] Bluetooth: hci1: command tx timeout [ 563.251313][ T9362] team0: Port device team_slave_1 added [ 563.552423][ T5847] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 563.698792][ T5914] usb 5-1: USB disconnect, device number 59 [ 563.709879][ T5847] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.709931][ T5847] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 563.735926][ T5847] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 563.735951][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.735969][ T5847] usb 4-1: Product: syz [ 563.735981][ T5847] usb 4-1: Manufacturer: syz [ 563.735993][ T5847] usb 4-1: SerialNumber: syz [ 563.824958][ T5847] usb 4-1: config 0 descriptor?? [ 564.006525][ T5847] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 564.079096][ T9362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.079112][ T9362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.079137][ T9362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.088086][ T9362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.088101][ T9362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.088125][ T9362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.096848][ T9555] udevd[9555]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.144225][ T5914] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 564.285486][ T5914] usb 5-1: device descriptor read/64, error -71 [ 564.522502][ T5914] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 564.652353][ T5914] usb 5-1: device descriptor read/64, error -71 [ 564.764236][ T5914] usb usb5-port1: attempt power cycle [ 565.132574][ T5914] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 565.153755][ T5914] usb 5-1: device descriptor read/8, error -71 [ 565.178717][ T9362] hsr_slave_0: entered promiscuous mode [ 565.180890][ T9362] hsr_slave_1: entered promiscuous mode [ 565.303290][ T5858] Bluetooth: hci1: command tx timeout [ 565.403365][ T9568] netlink: 32 bytes leftover after parsing attributes in process `syz.2.892'. [ 565.425741][ T5914] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 565.453071][ T5914] usb 5-1: device descriptor read/8, error -71 [ 565.562713][ T5914] usb usb5-port1: unable to enumerate USB device [ 567.382524][ T5858] Bluetooth: hci1: command tx timeout [ 567.855721][ T9591] ALSA: mixer_oss: invalid OSS volume '' [ 568.282484][ T5929] usb 4-1: USB disconnect, device number 43 [ 568.833698][ T5929] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 568.995043][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.995092][ T5929] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 568.995114][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.428055][ C1] vkms_vblank_simulate: vblank timer overrun [ 569.462341][ T5858] Bluetooth: hci1: command tx timeout [ 569.531180][ T5929] usb 4-1: config 0 descriptor?? [ 569.765514][ T5929] usbhid 4-1:0.0: can't add hid device: -71 [ 569.765629][ T5929] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 569.777164][ T9609] input: syz1 as /devices/virtual/input/input15 [ 569.806728][ T5929] usb 4-1: USB disconnect, device number 44 [ 569.905307][ T9615] netlink: 32 bytes leftover after parsing attributes in process `syz.2.901'. [ 570.322457][ T5929] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 570.676461][ T9628] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 570.905092][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 570.907810][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.907855][ T5929] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 570.907875][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.974232][ C1] vkms_vblank_simulate: vblank timer overrun [ 571.080560][ T5929] usb 4-1: config 0 descriptor?? [ 571.110976][ C1] vkms_vblank_simulate: vblank timer overrun [ 571.895440][ T5929] usbhid 4-1:0.0: can't add hid device: -71 [ 571.896345][ T5929] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 571.917381][ T5929] usb 4-1: USB disconnect, device number 45 [ 572.422655][ C1] vkms_vblank_simulate: vblank timer overrun [ 572.485876][ T9536] chnl_net:caif_netlink_parms(): no params data found [ 572.771888][ C1] vkms_vblank_simulate: vblank timer overrun [ 572.895412][ T9648] bridge2: entered promiscuous mode [ 572.895440][ T9648] bridge2: entered allmulticast mode [ 573.042480][ C1] vkms_vblank_simulate: vblank timer overrun [ 573.339943][ T9662] netlink: 32 bytes leftover after parsing attributes in process `syz.3.910'. [ 574.189337][ T9654] ALSA: mixer_oss: invalid OSS volume '' [ 574.800447][ T9536] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.811059][ T9536] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.811292][ T9536] bridge_slave_0: entered allmulticast mode [ 574.839473][ T9536] bridge_slave_0: entered promiscuous mode [ 574.878778][ T9536] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.878922][ T9536] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.879156][ T9536] bridge_slave_1: entered allmulticast mode [ 574.881965][ T9536] bridge_slave_1: entered promiscuous mode [ 575.427979][ T9688] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 576.129206][ T9536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.158861][ T9536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.690384][ T1508] bridge_slave_1: left allmulticast mode [ 576.690418][ T1508] bridge_slave_1: left promiscuous mode [ 576.690697][ T1508] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.754119][ T1508] bridge_slave_0: left allmulticast mode [ 576.754152][ T1508] bridge_slave_0: left promiscuous mode [ 576.754406][ T1508] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.219579][ T9710] netlink: 5 bytes leftover after parsing attributes in process `syz.3.918'. [ 579.040618][ T9713] netlink: 32 bytes leftover after parsing attributes in process `syz.4.919'. [ 581.149594][ T9732] ALSA: mixer_oss: invalid OSS volume '' [ 583.213204][ C1] vkms_vblank_simulate: vblank timer overrun [ 583.237596][ T1508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.423341][ T1508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.528139][ T1508] bond0 (unregistering): Released all slaves [ 583.617735][ T9536] team0: Port device team_slave_0 added [ 583.708621][ T9710] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 583.759160][ T9710] 0ªî{X¹¦: entered allmulticast mode [ 583.759450][ T9710] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 583.796043][ T9536] team0: Port device team_slave_1 added [ 583.796547][ T9362] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 583.994834][ T9748] netlink: 32 bytes leftover after parsing attributes in process `syz.3.929'. [ 584.085260][ T9362] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 584.392823][ T9362] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 584.692635][ T1508] hsr_slave_0: left promiscuous mode [ 584.978823][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.997050][ T1508] hsr_slave_1: left promiscuous mode [ 584.998907][ T1508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.116911][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.667220][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.783276][ T1508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.026240][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.158287][ T9774] ALSA: mixer_oss: invalid OSS volume '' [ 586.665441][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.008035][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.256660][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.320491][ T9784] netlink: 32 bytes leftover after parsing attributes in process `syz.2.938'. [ 589.482443][ T5914] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 589.612394][ T5914] usb 3-1: device descriptor read/64, error -71 [ 589.882348][ T5914] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 589.924889][ T1508] team0 (unregistering): Port device team_slave_1 removed [ 590.022369][ T5914] usb 3-1: device descriptor read/64, error -71 [ 590.033299][ T1508] team0 (unregistering): Port device team_slave_0 removed [ 590.140896][ T5914] usb usb3-port1: attempt power cycle [ 590.472416][ T5914] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 590.517762][ T5914] usb 3-1: device descriptor read/8, error -71 [ 590.762429][ T5914] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 590.826755][ T5914] usb 3-1: device descriptor read/8, error -71 [ 590.940984][ T5914] usb usb3-port1: unable to enumerate USB device [ 591.873825][ T9536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.873842][ T9536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.873867][ T9536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.966541][ T9362] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 592.017376][ T9536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.017390][ T9536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.017409][ T9536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.142513][ T990] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 592.477796][ T990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.477845][ T990] usb 3-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 592.477866][ T990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.551507][ T990] usb 3-1: config 0 descriptor?? [ 594.046143][ T990] usbhid 3-1:0.0: can't add hid device: -71 [ 594.046262][ T990] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 594.120451][ T990] usb 3-1: USB disconnect, device number 46 [ 597.766932][ T9848] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 599.607913][ T9536] hsr_slave_0: entered promiscuous mode [ 599.611445][ T9536] hsr_slave_1: entered promiscuous mode [ 599.622771][ T9536] debugfs: 'hsr0' already exists in 'hsr' [ 599.622798][ T9536] Cannot create hsr debugfs directory [ 601.822356][ T5929] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 601.972385][ T5929] usb 3-1: Using ep0 maxpacket: 32 [ 601.974712][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 601.974741][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 601.974764][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 601.974784][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 601.974805][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 601.977845][ T5929] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 601.977870][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.977887][ T5929] usb 3-1: Product: syz [ 601.977900][ T5929] usb 3-1: Manufacturer: syz [ 601.977912][ T5929] usb 3-1: SerialNumber: syz [ 602.693561][ T5853] Bluetooth: hci1: command 0x0405 tx timeout [ 602.905375][ T5929] usb 3-1: config 0 descriptor?? [ 603.626895][ T5929] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 603.651103][ T5929] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 603.706151][ T5929] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 604.185457][ T5929] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 604.191043][ T5929] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 604.197898][ T5929] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 604.211505][ T5929] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 604.243355][ T5929] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 604.273328][ T5929] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 604.285710][ T5929] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 604.287056][ T5929] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 604.297178][ T5929] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 604.301190][ T5929] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 604.303308][ T5929] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 604.331014][ T5929] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 604.337362][ T5929] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 604.359512][ T5929] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 604.379406][ T5929] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 604.379553][ T5929] input input16: Timeout waiting for response from device. [ 605.658312][ T5929] usb 3-1: USB disconnect, device number 47 [ 609.004625][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 609.031012][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 609.038902][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 609.049748][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 609.050610][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 611.002334][ T5847] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 611.144244][ T5853] Bluetooth: hci3: command tx timeout [ 611.175245][ T5847] usb 3-1: Using ep0 maxpacket: 32 [ 611.196367][ T5847] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 611.196397][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 611.196419][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 611.196439][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 611.196461][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 611.226837][ T5847] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 611.226863][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.226881][ T5847] usb 3-1: Product: syz [ 611.226893][ T5847] usb 3-1: Manufacturer: syz [ 611.226905][ T5847] usb 3-1: SerialNumber: syz [ 611.294631][ T5847] usb 3-1: config 0 descriptor?? [ 611.704956][ T9918] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.971'. [ 611.727648][ T5847] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 611.728483][ T5847] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 611.729301][ T5847] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 611.936619][ T5847] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 611.937101][ T5847] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 611.941947][ T5847] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 611.961986][ T5847] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 611.978207][ T5847] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 611.978730][ T5847] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 612.002950][ T5847] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 612.012420][ T5847] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 612.012973][ T5847] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 612.013468][ T5847] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 612.013929][ T5847] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 612.014381][ T5847] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 612.014852][ T5847] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 612.027240][ T5847] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 612.061654][ T5847] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 612.061702][ T5847] input input17: Timeout waiting for response from device. [ 612.115687][ T5847] usb 3-1: USB disconnect, device number 48 [ 612.167419][ T9556] udevd[9556]: setting owner of /dev/bus/usb/003/048 to uid=0, gid=0 failed: No such file or directory [ 612.226967][ T9918] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç' already exists in 'ieee80211' [ 612.360547][ T9917] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 612.360780][ T9917] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 612.360972][ T9917] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 612.361047][ T9917] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 612.576189][ T9917] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 614.765731][ T5853] Bluetooth: hci3: command tx timeout [ 614.765994][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout [ 614.767770][ T5853] Bluetooth: hci2: command 0x0c1a tx timeout [ 614.850822][ T5858] Bluetooth: hci1: command 0x0405 tx timeout [ 615.139741][ T9917] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 615.139835][ T9917] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 615.235167][ T9917] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 615.682442][ T5847] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 615.838508][ T5847] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 615.838539][ T5847] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 615.853079][ T5847] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 615.853107][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.853124][ T5847] usb 3-1: Product: syz [ 615.853137][ T5847] usb 3-1: Manufacturer: syz [ 615.853149][ T5847] usb 3-1: SerialNumber: syz [ 615.872327][ T5847] usb 3-1: config 0 descriptor?? [ 615.873517][ T9935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 615.873707][ T9935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 616.112665][ T9536] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 616.115266][ T9935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 616.117512][ T9935] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 616.223148][ T9536] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 616.416968][ T9536] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 616.517522][ T9536] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 616.727986][ T5847] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 616.902407][ T5853] Bluetooth: hci1: command 0x0405 tx timeout [ 617.004918][ T1305] bridge_slave_1: left allmulticast mode [ 617.004949][ T1305] bridge_slave_1: left promiscuous mode [ 617.005210][ T1305] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.109750][ T1305] bridge_slave_0: left allmulticast mode [ 617.109782][ T1305] bridge_slave_0: left promiscuous mode [ 617.110081][ T1305] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.143059][ T5853] Bluetooth: hci3: command 0x0419 tx timeout [ 618.212954][ T5929] usb 3-1: USB disconnect, device number 49 [ 619.064432][ T5853] Bluetooth: hci1: command 0x0405 tx timeout [ 619.225408][ T5853] Bluetooth: hci3: command 0x0419 tx timeout [ 619.383107][ T1305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.765390][ T1305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.476538][ T1305] bond0 (unregistering): Released all slaves [ 620.643936][ C1] vkms_vblank_simulate: vblank timer overrun [ 620.748155][ T9899] chnl_net:caif_netlink_parms(): no params data found [ 620.916861][ C1] vkms_vblank_simulate: vblank timer overrun [ 620.925629][ T9977] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.986'. [ 621.673615][ T9977] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç' [ 621.673636][ T9977] CPU: 0 UID: 0 PID: 9977 Comm: syz.3.986 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 621.673658][ T9977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 621.673669][ T9977] Call Trace: [ 621.673677][ T9977] [ 621.673685][ T9977] dump_stack_lvl+0x189/0x250 [ 621.673721][ T9977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 621.673747][ T9977] ? __pfx__printk+0x10/0x10 [ 621.673767][ T9977] ? kernfs_path_from_node+0x2c/0x280 [ 621.673791][ T9977] ? kernfs_path_from_node+0x2c/0x280 [ 621.673808][ T9977] ? kernfs_path_from_node+0x243/0x280 [ 621.673824][ T9977] ? kernfs_path_from_node+0x2c/0x280 [ 621.673847][ T9977] sysfs_warn_dup+0x8e/0xa0 [ 621.673873][ T9977] sysfs_do_create_link_sd+0xc0/0x110 [ 621.673894][ T9977] device_add_class_symlinks+0x1d2/0x240 [ 621.673924][ T9977] device_add+0x475/0xb50 [ 621.673954][ T9977] wiphy_register+0x1ba6/0x28d0 [ 621.673993][ T9977] ? __pfx_wiphy_register+0x10/0x10 [ 621.674013][ T9977] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 621.674043][ T9977] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 621.674065][ T9977] ieee80211_register_hw+0x3425/0x4080 [ 621.674097][ T9977] ? ieee80211_register_hw+0x14a1/0x4080 [ 621.674122][ T9977] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 621.674143][ T9977] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 621.674167][ T9977] ? __hrtimer_setup+0x18a/0x200 [ 621.674183][ T9977] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 621.674202][ T9977] mac80211_hwsim_new_radio+0x2c76/0x4e30 [ 621.674235][ T9977] ? mac80211_hwsim_new_radio+0x10b/0x4e30 [ 621.674262][ T9977] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 621.674277][ T9977] ? trace_kmalloc+0x1f/0xd0 [ 621.674294][ T9977] ? kstrndup+0xbf/0x160 [ 621.674318][ T9977] hwsim_new_radio_nl+0xea4/0x1b10 [ 621.674336][ T9977] ? __pfx___nla_validate_parse+0x10/0x10 [ 621.674365][ T9977] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 621.674383][ T9977] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 621.674409][ T9977] ? __nla_parse+0x40/0x60 [ 621.674429][ T9977] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 621.674454][ T9977] genl_family_rcv_msg_doit+0x215/0x300 [ 621.674478][ T9977] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 621.674507][ T9977] ? bpf_lsm_capable+0x9/0x20 [ 621.674522][ T9977] ? security_capable+0x7e/0x2e0 [ 621.674544][ T9977] genl_rcv_msg+0x60e/0x790 [ 621.674568][ T9977] ? __pfx_genl_rcv_msg+0x10/0x10 [ 621.674585][ T9977] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 621.674602][ T9977] ? __lock_acquire+0xab9/0xd20 [ 621.674625][ T9977] netlink_rcv_skb+0x205/0x470 [ 621.674641][ T9977] ? __pfx_genl_rcv_msg+0x10/0x10 [ 621.674660][ T9977] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 621.674688][ T9977] ? netlink_deliver_tap+0x2e/0x1b0 [ 621.674703][ T9977] ? netlink_deliver_tap+0x2e/0x1b0 [ 621.674721][ T9977] genl_rcv+0x28/0x40 [ 621.674737][ T9977] netlink_unicast+0x843/0xa10 [ 621.674759][ T9977] ? __pfx_netlink_unicast+0x10/0x10 [ 621.674774][ T9977] ? netlink_sendmsg+0x642/0xb30 [ 621.674788][ T9977] ? skb_put+0x11b/0x210 [ 621.674808][ T9977] netlink_sendmsg+0x805/0xb30 [ 621.674832][ T9977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.674854][ T9977] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 621.674867][ T9977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.674883][ T9977] __sock_sendmsg+0x219/0x270 [ 621.674900][ T9977] ____sys_sendmsg+0x508/0x820 [ 621.674923][ T9977] ? __pfx_____sys_sendmsg+0x10/0x10 [ 621.674948][ T9977] ? import_iovec+0x74/0xa0 [ 621.674965][ T9977] ___sys_sendmsg+0x21f/0x2a0 [ 621.674986][ T9977] ? __pfx____sys_sendmsg+0x10/0x10 [ 621.675034][ T9977] ? __fget_files+0x2a/0x420 [ 621.675050][ T9977] ? __fget_files+0x3a6/0x420 [ 621.675076][ T9977] __x64_sys_sendmsg+0x1a1/0x260 [ 621.675096][ T9977] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 621.675122][ T9977] ? rcu_is_watching+0x15/0xb0 [ 621.675145][ T9977] ? do_syscall_64+0xbe/0x3b0 [ 621.675165][ T9977] do_syscall_64+0xfa/0x3b0 [ 621.675180][ T9977] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.675196][ T9977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.675209][ T9977] ? clear_bhb_loop+0x60/0xb0 [ 621.675230][ T9977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.675244][ T9977] RIP: 0033:0x7fb7a249ebe9 [ 621.675257][ T9977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.675269][ T9977] RSP: 002b:00007fb7a02a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 621.675285][ T9977] RAX: ffffffffffffffda RBX: 00007fb7a26c6270 RCX: 00007fb7a249ebe9 [ 621.675296][ T9977] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000008 [ 621.675305][ T9977] RBP: 00007fb7a2521e19 R08: 0000000000000000 R09: 0000000000000000 [ 621.675314][ T9977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.675322][ T9977] R13: 00007fb7a26c6308 R14: 00007fb7a26c6270 R15: 00007ffc2245ef98 [ 621.675347][ T9977] [ 621.684836][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.822291][ T5853] Bluetooth: hci3: command 0x0419 tx timeout [ 622.044766][ T9976] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 622.045029][ T9976] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 622.045211][ T9976] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 622.045399][ T9976] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 622.440134][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 622.462721][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 622.464497][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 622.466889][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 622.467419][ T5853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 622.812181][ C1] vkms_vblank_simulate: vblank timer overrun [ 622.990865][ C1] vkms_vblank_simulate: vblank timer overrun [ 623.402714][ C1] vkms_vblank_simulate: vblank timer overrun [ 624.044343][ T1305] hsr_slave_0: left promiscuous mode [ 624.062410][ T9] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 624.082583][ T1305] hsr_slave_1: left promiscuous mode [ 624.083462][ T1305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.102324][ T5853] Bluetooth: hci3: command 0x0419 tx timeout [ 624.102362][ T5853] Bluetooth: hci2: command 0x0c1a tx timeout [ 624.102395][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout [ 624.123213][ T1305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.216714][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 624.216743][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 624.223536][ T9] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 624.223563][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.223580][ T9] usb 5-1: Product: syz [ 624.223592][ T9] usb 5-1: Manufacturer: syz [ 624.223604][ T9] usb 5-1: SerialNumber: syz [ 624.228968][ T9] usb 5-1: config 0 descriptor?? [ 624.231234][ T9997] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 624.231416][ T9997] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 624.356849][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.356974][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.526020][ T9997] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 624.526163][ T9997] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 624.592508][ T5858] Bluetooth: hci5: command tx timeout [ 625.157660][ T9] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 626.662667][ T5858] Bluetooth: hci5: command tx timeout [ 626.874976][ T990] usb 5-1: USB disconnect, device number 64 [ 627.945362][ T1305] team0 (unregistering): Port device team_slave_1 removed [ 628.742665][ T5858] Bluetooth: hci5: command tx timeout [ 629.063312][ T1305] team0 (unregistering): Port device team_slave_0 removed [ 630.941617][ T5858] Bluetooth: hci5: command tx timeout [ 632.421744][ C0] vkms_vblank_simulate: vblank timer overrun [ 633.078826][ T9899] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.078911][ T9899] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.079065][ T9899] bridge_slave_0: entered allmulticast mode [ 633.102842][ T9899] bridge_slave_0: entered promiscuous mode [ 633.110460][T10038] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 633.150282][ T9899] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.150427][ T9899] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.150803][ T9899] bridge_slave_1: entered allmulticast mode [ 633.175466][ T9899] bridge_slave_1: entered promiscuous mode [ 633.179358][T10038] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 633.179649][T10038] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 633.179972][T10038] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 633.206285][T10038] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 633.224750][T10043] [ 633.224762][T10043] ====================================================== [ 633.224770][T10043] WARNING: possible circular locking dependency detected [ 633.224783][T10043] syzkaller #0 Not tainted SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 633.224794][T10043] ------------------------------------------------------ [ 633.224801][T10043] syz.4.1003/10043 is trying to acquire lock: [ 633.224811][T10043] ffffffff8da8c9b8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x278/0x1620 [ 633.224858][T10043] [ 633.224858][T10043] but task is already holding lock: [ 633.224865][T10043] ffff888143fbc0a8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb20 [ 633.224912][T10043] [ 633.224912][T10043] which lock already depends on the new lock. [ 633.224912][T10043] [ 633.224919][T10043] [ 633.224919][T10043] the existing dependency chain (in reverse order) is: [ 633.224926][T10043] [ 633.224926][T10043] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 633.224955][T10043] lock_acquire+0x120/0x360 [ 633.224976][T10043] blk_alloc_queue+0x582/0x670 [ 633.224997][T10043] __blk_mq_alloc_disk+0x15c/0x340 [ 633.225014][T10043] nbd_dev_add+0x46c/0xaf0 [ 633.225032][T10043] nbd_init+0x168/0x1f0 [ 633.225047][T10043] do_one_initcall+0x233/0x820 [ 633.225062][T10043] do_initcall_level+0x104/0x190 [ 633.225077][T10043] do_initcalls+0x59/0xa0 [ 633.225099][T10043] kernel_init_freeable+0x334/0x4b0 [ 633.225122][T10043] kernel_init+0x1d/0x1d0 [ 633.225136][T10043] ret_from_fork+0x3fc/0x770 [ 633.225155][T10043] ret_from_fork_asm+0x1a/0x30 [ 633.225170][T10043] [ 633.225170][T10043] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 633.225194][T10043] lock_acquire+0x120/0x360 [ 633.225213][T10043] fs_reclaim_acquire+0x72/0x100 [ 633.225228][T10043] prepare_alloc_pages+0x153/0x670 [ 633.225242][T10043] __alloc_frozen_pages_noprof+0x123/0x370 [ 633.225259][T10043] __alloc_pages_noprof+0xa/0x30 [ 633.225280][T10043] pcpu_populate_chunk+0x182/0xb30 [ 633.225296][T10043] pcpu_alloc_noprof+0xc46/0x1620 [ 633.225311][T10043] bpf_map_alloc_percpu+0x10c/0x270 [ 633.225334][T10043] prealloc_init+0x225/0x630 [ 633.225354][T10043] htab_map_alloc+0x6ce/0xc70 [ 633.225370][T10043] map_create+0xaa3/0x14e0 [ 633.225388][T10043] __sys_bpf+0x60f/0x870 [ 633.225404][T10043] __x64_sys_bpf+0x7c/0x90 [ 633.225420][T10043] do_syscall_64+0xfa/0x3b0 [ 633.225439][T10043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.225456][T10043] [ 633.225456][T10043] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 633.225479][T10043] validate_chain+0xb9b/0x2140 [ 633.225500][T10043] __lock_acquire+0xab9/0xd20 [ 633.225518][T10043] lock_acquire+0x120/0x360 [ 633.225537][T10043] _mutex_lock_killable+0x63/0x1d0 [ 633.225552][T10043] pcpu_alloc_noprof+0x278/0x1620 [ 633.225567][T10043] sbitmap_init_node+0x1e1/0x630 [ 633.225588][T10043] sbitmap_queue_init_node+0x3e/0x4d0 [ 633.225611][T10043] blk_mq_init_tags+0x11e/0x270 [ 633.225630][T10043] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 633.225646][T10043] blk_mq_update_nr_hw_queues+0xa3f/0x1ab0 [ 633.225664][T10043] nbd_start_device+0x17f/0xb20 [ 633.225682][T10043] nbd_genl_connect+0x1363/0x1920 [ 633.225699][T10043] genl_family_rcv_msg_doit+0x215/0x300 [ 633.225722][T10043] genl_rcv_msg+0x60e/0x790 [ 633.225742][T10043] netlink_rcv_skb+0x205/0x470 [ 633.225759][T10043] genl_rcv+0x28/0x40 [ 633.225778][T10043] netlink_unicast+0x843/0xa10 [ 633.225793][T10043] netlink_sendmsg+0x805/0xb30 [ 633.225811][T10043] __sock_sendmsg+0x219/0x270 [ 633.225826][T10043] ____sys_sendmsg+0x508/0x820 [ 633.225846][T10043] ___sys_sendmsg+0x21f/0x2a0 [ 633.225865][T10043] __x64_sys_sendmsg+0x1a1/0x260 [ 633.225886][T10043] do_syscall_64+0xfa/0x3b0 [ 633.225905][T10043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.225921][T10043] [ 633.225921][T10043] other info that might help us debug this: [ 633.225921][T10043] [ 633.225928][T10043] Chain exists of: [ 633.225928][T10043] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#49 [ 633.225928][T10043] [ 633.225961][T10043] Possible unsafe locking scenario: [ 633.225961][T10043] [ 633.225967][T10043] CPU0 CPU1 [ 633.225973][T10043] ---- ---- [ 633.225979][T10043] lock(&q->q_usage_counter(io)#49); [ 633.225995][T10043] lock(fs_reclaim); [ 633.226009][T10043] lock(&q->q_usage_counter(io)#49); [ 633.226027][T10043] lock(pcpu_alloc_mutex); [ 633.226039][T10043] [ 633.226039][T10043] *** DEADLOCK *** [ 633.226039][T10043] [ 633.226043][T10043] 6 locks held by syz.4.1003/10043: [ 633.226054][T10043] #0: ffffffff8ed380c0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 633.226098][T10043] #1: ffffffff8ed37eb8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 633.226145][T10043] #2: ffff888024b2b968 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xb3/0x1ab0 [ 633.226189][T10043] #3: ffff888024b2b8c8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc6/0x1ab0 [ 633.226231][T10043] #4: ffff888143fbc0a8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb20 [ 633.226287][T10043] #5: ffff888143fbc0e0 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb20 [ 633.226337][T10043] [ 633.226337][T10043] stack backtrace: [ 633.226348][T10043] CPU: 1 UID: 0 PID: 10043 Comm: syz.4.1003 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 633.226370][T10043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 633.226381][T10043] Call Trace: [ 633.226388][T10043] [ 633.226396][T10043] dump_stack_lvl+0x189/0x250 [ 633.226422][T10043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 633.226446][T10043] ? __pfx__printk+0x10/0x10 [ 633.226465][T10043] ? print_lock_name+0xde/0x100 [ 633.226485][T10043] print_circular_bug+0x2ee/0x310 [ 633.226504][T10043] check_noncircular+0x134/0x160 [ 633.226532][T10043] validate_chain+0xb9b/0x2140 [ 633.226565][T10043] __lock_acquire+0xab9/0xd20 [ 633.226588][T10043] ? pcpu_alloc_noprof+0x278/0x1620 [ 633.226605][T10043] lock_acquire+0x120/0x360 [ 633.226625][T10043] ? pcpu_alloc_noprof+0x278/0x1620 [ 633.226643][T10043] ? do_syscall_64+0xfa/0x3b0 [ 633.226664][T10043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.226684][T10043] ? pcpu_alloc_noprof+0x278/0x1620 [ 633.226701][T10043] _mutex_lock_killable+0x63/0x1d0 [ 633.226718][T10043] ? pcpu_alloc_noprof+0x278/0x1620 [ 633.226734][T10043] ? pcpu_alloc_noprof+0x278/0x1620 [ 633.226752][T10043] pcpu_alloc_noprof+0x278/0x1620 [ 633.226775][T10043] sbitmap_init_node+0x1e1/0x630 [ 633.226798][T10043] ? blk_mq_init_tags+0x83/0x270 [ 633.226821][T10043] sbitmap_queue_init_node+0x3e/0x4d0 [ 633.226847][T10043] blk_mq_init_tags+0x11e/0x270 [ 633.226869][T10043] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 633.226888][T10043] ? blk_mq_update_nr_hw_queues+0x941/0x1ab0 [ 633.226908][T10043] ? kfree+0x195/0x550 [ 633.226930][T10043] blk_mq_update_nr_hw_queues+0xa3f/0x1ab0 [ 633.226958][T10043] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 633.226983][T10043] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 633.227004][T10043] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 633.227035][T10043] ? nbd_start_device+0x174/0xb20 [ 633.227058][T10043] nbd_start_device+0x17f/0xb20 [ 633.227081][T10043] ? device_create_file+0xf4/0x1c0 [ 633.227103][T10043] nbd_genl_connect+0x1363/0x1920 [ 633.227128][T10043] ? __pfx_nbd_genl_connect+0x10/0x10 [ 633.227162][T10043] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 633.227191][T10043] ? __nla_parse+0x40/0x60 [ 633.227216][T10043] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 633.227245][T10043] genl_family_rcv_msg_doit+0x215/0x300 [ 633.227281][T10043] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 633.227316][T10043] genl_rcv_msg+0x60e/0x790 [ 633.227342][T10043] ? __pfx_genl_rcv_msg+0x10/0x10 [ 633.227366][T10043] ? __pfx_nbd_genl_connect+0x10/0x10 [ 633.227388][T10043] ? __lock_acquire+0xab9/0xd20 [ 633.227412][T10043] netlink_rcv_skb+0x205/0x470 [ 633.227433][T10043] ? __pfx_genl_rcv_msg+0x10/0x10 [ 633.227457][T10043] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 633.227483][T10043] ? netlink_deliver_tap+0x2e/0x1b0 [ 633.227502][T10043] ? netlink_deliver_tap+0x2e/0x1b0 [ 633.227522][T10043] genl_rcv+0x28/0x40 [ 633.227544][T10043] netlink_unicast+0x843/0xa10 [ 633.227565][T10043] ? __pfx_netlink_unicast+0x10/0x10 [ 633.227584][T10043] ? netlink_sendmsg+0x642/0xb30 [ 633.227602][T10043] ? skb_put+0x11b/0x210 [ 633.227625][T10043] netlink_sendmsg+0x805/0xb30 [ 633.227648][T10043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.227672][T10043] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 633.227688][T10043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 633.227708][T10043] __sock_sendmsg+0x219/0x270 [ 633.227727][T10043] ____sys_sendmsg+0x508/0x820 [ 633.227752][T10043] ? __pfx_____sys_sendmsg+0x10/0x10 [ 633.227778][T10043] ? import_iovec+0x74/0xa0 [ 633.227797][T10043] ___sys_sendmsg+0x21f/0x2a0 [ 633.227820][T10043] ? __pfx____sys_sendmsg+0x10/0x10 [ 633.227856][T10043] ? __fget_files+0x2a/0x420 [ 633.227878][T10043] ? __fget_files+0x3a6/0x420 [ 633.227904][T10043] __x64_sys_sendmsg+0x1a1/0x260 [ 633.227927][T10043] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 633.227954][T10043] ? rcu_is_watching+0x15/0xb0 [ 633.227980][T10043] ? do_syscall_64+0xbe/0x3b0 [ 633.228003][T10043] do_syscall_64+0xfa/0x3b0 [ 633.228023][T10043] ? lockdep_hardirqs_on+0x9c/0x150 [ 633.228043][T10043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.228060][T10043] ? clear_bhb_loop+0x60/0xb0 [ 633.228079][T10043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.228095][T10043] RIP: 0033:0x7f380a88ebe9 [ 633.228111][T10043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.228126][T10043] RSP: 002b:00007f3808af6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 633.228145][T10043] RAX: ffffffffffffffda RBX: 00007f380aab5fa0 RCX: 00007f380a88ebe9 [ 633.228159][T10043] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 633.228171][T10043] RBP: 00007f380a911e19 R08: 0000000000000000 R09: 0000000000000000 [ 633.228183][T10043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.228195][T10043] R13: 00007f380aab6038 R14: 00007f380aab5fa0 R15: 00007ffcfdb33288 [ 633.228215][T10043] [ 633.752861][ T5858] block nbd0: Receive control failed (result -32) [ 633.753687][ T5858] block nbd0: Receive control failed (result -32) [ 634.405501][T10038] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 634.422401][T10036] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.1001'. [ 634.478988][T10036] ieee80211 Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç: Selected rate control algorithm 'minstrel_ht' [ 634.479157][T10036] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç' [ 634.479169][T10036] CPU: 1 UID: 0 PID: 10036 Comm: syz.3.1001 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 634.479181][T10036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 634.479188][T10036] Call Trace: [ 634.479192][T10036] [ 634.479196][T10036] dump_stack_lvl+0x189/0x250 [ 634.479215][T10036] ? __pfx_dump_stack_lvl+0x10/0x10 [ 634.479229][T10036] ? __pfx__printk+0x10/0x10 [ 634.479238][T10036] ? lock_release+0x4b/0x3e0 [ 634.479251][T10036] ? kernfs_path_from_node+0x2c/0x280 [ 634.479261][T10036] ? kernfs_path_from_node+0x243/0x280 [ 634.479269][T10036] ? kernfs_path_from_node+0x2c/0x280 [ 634.479279][T10036] sysfs_warn_dup+0x8e/0xa0 [ 634.479291][T10036] sysfs_do_create_link_sd+0xc0/0x110 [ 634.479300][T10036] device_add_class_symlinks+0x1d2/0x240 [ 634.479315][T10036] device_add+0x475/0xb50 [ 634.479327][T10036] wiphy_register+0x1ba6/0x28d0 [ 634.479351][T10036] ? __pfx_wiphy_register+0x10/0x10 [ 634.479361][T10036] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 634.479377][T10036] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 634.479392][T10036] ieee80211_register_hw+0x3425/0x4080 [ 634.479410][T10036] ? ieee80211_register_hw+0x14a1/0x4080 [ 634.479424][T10036] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 634.479439][T10036] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 634.479453][T10036] ? __hrtimer_setup+0x18a/0x200 [ 634.479465][T10036] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 634.479477][T10036] mac80211_hwsim_new_radio+0x2c76/0x4e30 [ 634.479490][T10036] ? mac80211_hwsim_new_radio+0x10b/0x4e30 [ 634.479502][T10036] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 634.479512][T10036] ? trace_kmalloc+0x1f/0xd0 [ 634.479523][T10036] ? kstrndup+0xbf/0x160 [ 634.479536][T10036] hwsim_new_radio_nl+0xea4/0x1b10 [ 634.479547][T10036] ? __pfx___nla_validate_parse+0x10/0x10 [ 634.479562][T10036] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 634.479573][T10036] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 634.479584][T10036] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 634.479599][T10036] ? __nla_parse+0x40/0x60 [ 634.479612][T10036] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 634.479626][T10036] genl_family_rcv_msg_doit+0x215/0x300 [ 634.479641][T10036] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 634.479656][T10036] ? bpf_lsm_capable+0x9/0x20 [ 634.479667][T10036] ? security_capable+0x7e/0x2e0 [ 634.479680][T10036] genl_rcv_msg+0x60e/0x790 [ 634.479694][T10036] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.479706][T10036] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 634.479716][T10036] ? __lock_acquire+0xab9/0xd20 [ 634.479729][T10036] netlink_rcv_skb+0x205/0x470 [ 634.479739][T10036] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.479751][T10036] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 634.479761][T10036] ? rcu_read_unlock_special+0x35b/0x470 [ 634.479775][T10036] ? netlink_deliver_tap+0x2e/0x1b0 [ 634.479786][T10036] genl_rcv+0x28/0x40 [ 634.479797][T10036] netlink_unicast+0x843/0xa10 [ 634.479808][T10036] ? __pfx_netlink_unicast+0x10/0x10 [ 634.479818][T10036] ? netlink_sendmsg+0x642/0xb30 [ 634.479827][T10036] ? skb_put+0x11b/0x210 [ 634.479840][T10036] netlink_sendmsg+0x805/0xb30 [ 634.479852][T10036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.479864][T10036] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 634.479873][T10036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.479883][T10036] __sock_sendmsg+0x219/0x270 [ 634.479893][T10036] ____sys_sendmsg+0x508/0x820 [ 634.479906][T10036] ? __pfx_____sys_sendmsg+0x10/0x10 [ 634.479920][T10036] ? import_iovec+0x74/0xa0 [ 634.479930][T10036] ___sys_sendmsg+0x21f/0x2a0 [ 634.479943][T10036] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.479961][T10036] ? __fget_files+0x2a/0x420 [ 634.479973][T10036] ? __fget_files+0x3a6/0x420 [ 634.479986][T10036] __x64_sys_sendmsg+0x1a1/0x260 [ 634.479999][T10036] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 634.480013][T10036] ? __secure_computing+0xe2/0x2a0 [ 634.480028][T10036] do_syscall_64+0xfa/0x3b0 [ 634.480039][T10036] ? lockdep_hardirqs_on+0x9c/0x150 [ 634.480050][T10036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.480060][T10036] ? clear_bhb_loop+0x60/0xb0 [ 634.480070][T10036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.480079][T10036] RIP: 0033:0x7fb7a249ebe9 [ 634.480089][T10036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.480097][T10036] RSP: 002b:00007fb7a06e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.480108][T10036] RAX: ffffffffffffffda RBX: 00007fb7a26c6090 RCX: 00007fb7a249ebe9 [ 634.480116][T10036] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000008 [ 634.480122][T10036] RBP: 00007fb7a2521e19 R08: 0000000000000000 R09: 0000000000000000 [ 634.480129][T10036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.480135][T10036] R13: 00007fb7a26c6128 R14: 00007fb7a26c6090 R15: 00007ffc2245ef98 [ 634.480146][T10036] [ 634.672339][ T5858] Bluetooth: hci0: command 0x0c1a tx timeout [ 635.222377][ T5858] Bluetooth: hci5: command 0x0c1a tx timeout [ 635.222407][ T5858] Bluetooth: hci3: command 0x0419 tx timeout [ 635.222426][ T5858] Bluetooth: hci2: command 0x0c1a tx timeout [ 637.294578][ T1305] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.504957][ T1305] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.723927][ T1305] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.965673][ T1305] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.324156][ T1305] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.564530][ T1305] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.784126][ T1305] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.984136][ T1305] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.302540][ T1305] bridge_slave_1: left allmulticast mode [ 640.302566][ T1305] bridge_slave_1: left promiscuous mode [ 640.302731][ T1305] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.392927][ T1305] bridge_slave_0: left allmulticast mode [ 640.392949][ T1305] bridge_slave_0: left promiscuous mode [ 640.393113][ T1305] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.483445][ T1305] bridge_slave_1: left allmulticast mode [ 640.483462][ T1305] bridge_slave_1: left promiscuous mode [ 640.483554][ T1305] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.562783][ T1305] bridge_slave_0: left allmulticast mode [ 640.562801][ T1305] bridge_slave_0: left promiscuous mode [ 640.562914][ T1305] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.633437][ T1305] bridge_slave_1: left allmulticast mode [ 640.633454][ T1305] bridge_slave_1: left promiscuous mode [ 640.633552][ T1305] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.702764][ T1305] bridge_slave_0: left allmulticast mode [ 640.702781][ T1305] bridge_slave_0: left promiscuous mode [ 640.702885][ T1305] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.113512][ T1305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.172831][ T1305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.193574][ T1305] bond0 (unregistering): Released all slaves