last executing test programs: 9m24.766636675s ago: executing program 2 (id=18): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x18) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0xffffffffffffffff}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') read$FUSE(r3, &(0x7f0000004800)={0x2020}, 0x2020) 9m22.018797791s ago: executing program 2 (id=19): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000040)=@chain) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1, 0x0, 0x0, 0x8000000}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x10}, 0xc) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, 0x0, 0x0, 0x97, 0x8000000}) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) 9m16.426430644s ago: executing program 2 (id=28): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) faccessat(0xffffffffffffffff, 0x0, 0x81) socket(0x400000000010, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000007c0)={0x8, {{0xa, 0x4e20, 0x2, @remote}}, {{0xa, 0x4e23, 0xc, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffffff9}}}, 0x108) 9m5.299960068s ago: executing program 2 (id=41): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0xfffffffd, 0x0, 0x7cce8c743ee810df}) read(r0, &(0x7f0000000840)=""/40, 0x28) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008804}, 0x4048012) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) fsync(r3) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x20000) 9m0.394150691s ago: executing program 2 (id=51): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x400, &(0x7f0000000180)={@align=0x8000, {0x10, 0x5, 0x80, 0xd57}}, 0x8000, &(0x7f00000001c0), &(0x7f0000000200)=0xfff}) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532322c70726976706f72742c0004d6fe9f773da921d86d07f15b229baa73e57dfe1d51"]) 8m57.408292828s ago: executing program 2 (id=53): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f00000002c0)={{}, 0x4, 0x1, 0xfffffffffffffffe}) 8m40.752047155s ago: executing program 32 (id=53): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f00000002c0)={{}, 0x4, 0x1, 0xfffffffffffffffe}) 8m10.431127163s ago: executing program 1 (id=119): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x3d}, 0x28) socket$nl_xfrm(0x10, 0x3, 0x6) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x2}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000900)=@deltaction={0x14, 0x31, 0x20, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, &(0x7f0000000080), 0x8) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) r4 = gettid() tkill(r4, 0x13) 8m10.281877852s ago: executing program 1 (id=121): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) r1 = getpid() kcmp(r1, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)={0x2, 'veth0_vlan\x00', {0x2}, 0xa}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) openat$pfkey(0xffffffffffffff9c, 0x0, 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpriority(0x2, r6) ptrace$pokeuser(0x6, r6, 0x388, 0x41d9fda7) 8m9.09184291s ago: executing program 1 (id=123): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8c}, 0x1c, 0x0}}], 0x1, 0x80) r1 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) 8m7.63922503s ago: executing program 1 (id=124): r0 = userfaultfd(0x80001) io_setup(0x8, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) r6 = syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0xf0f046}) poll(&(0x7f0000000180)=[{r6, 0x3}], 0x1, 0x9) 8m6.476182802s ago: executing program 1 (id=127): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) r1 = getpid() kcmp(r1, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)={0x2, 'veth0_vlan\x00', {0x2}, 0xa}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) openat$pfkey(0xffffffffffffff9c, 0x0, 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpriority(0x2, r6) ptrace$pokeuser(0x6, r6, 0x388, 0x41d9fda7) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x810) 8m1.622680328s ago: executing program 1 (id=133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x98, 0x90, 0x130, 0xffffffff, 0xffffffff, 0x98, 0x208, 0x208, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x130}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x400, &(0x7f0000001300)=""/4096) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000340)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x10, 0x0, [{@loopback}]}}) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x62020600) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x589c, 0x4, 0xf, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0xa}, 0x50) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0xec4}], 0x1}}], 0x1, 0x4001) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000001380)={{{0x1, 0x1}}, 0xfffffd3f, 0x40, 0x0}) 7m59.376224137s ago: executing program 0 (id=136): r0 = userfaultfd(0x80001) io_setup(0x8, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) r6 = syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) r7 = dup(r6) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0xf0f046}) poll(&(0x7f0000000180)=[{r6, 0x3}], 0x1, 0x9) 7m57.718417328s ago: executing program 0 (id=139): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) r1 = getpid() kcmp(r1, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)={0x2, 'veth0_vlan\x00', {0x2}, 0xa}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) openat$pfkey(0xffffffffffffff9c, 0x0, 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpriority(0x2, r6) ptrace$pokeuser(0x6, r6, 0x388, 0x41d9fda7) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x810) 7m53.877608404s ago: executing program 0 (id=141): socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x3d}, 0x28) socket$nl_xfrm(0x10, 0x3, 0x6) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x2}}, 0x10) socket$key(0xf, 0x3, 0x2) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, &(0x7f0000000080), 0x8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) r3 = gettid() tkill(r3, 0x13) 7m53.638214317s ago: executing program 0 (id=142): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8c}, 0x1c, 0x0}}], 0x1, 0x80) r1 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) 7m52.513551676s ago: executing program 0 (id=143): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x311000, 0x1000, 0x40000, 0x1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0xfffffffe, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r4}, 0x38) 7m49.176966524s ago: executing program 0 (id=146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') read$FUSE(r2, &(0x7f0000004800)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020) 7m46.450311575s ago: executing program 33 (id=133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x98, 0x90, 0x130, 0xffffffff, 0xffffffff, 0x98, 0x208, 0x208, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x130}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x400, &(0x7f0000001300)=""/4096) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000340)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x10, 0x0, [{@loopback}]}}) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x62020600) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x589c, 0x4, 0xf, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0xa}, 0x50) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0xec4}], 0x1}}], 0x1, 0x4001) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000001380)={{{0x1, 0x1}}, 0xfffffd3f, 0x40, 0x0}) 7m33.513165746s ago: executing program 34 (id=146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') read$FUSE(r2, &(0x7f0000004800)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020) 3m17.040007725s ago: executing program 4 (id=868): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add 6', 0x5) 3m16.930776864s ago: executing program 4 (id=870): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='add 1', 0x5) write(0xffffffffffffffff, &(0x7f0000000180)='add 2', 0x5) 3m16.660265437s ago: executing program 4 (id=872): mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000340)='add 1', 0x5) 3m16.470972665s ago: executing program 4 (id=874): r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x30, r0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x30}}, 0x0) 3m16.099763022s ago: executing program 4 (id=878): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='77', 0x2) 3m15.975863583s ago: executing program 4 (id=881): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='3', 0x1) 3m0.826659376s ago: executing program 35 (id=881): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='3', 0x1) 2m33.694777089s ago: executing program 6 (id=1332): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='0', 0x1) 2m33.496880511s ago: executing program 6 (id=1334): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 2m33.24014897s ago: executing program 6 (id=1337): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f0000000380)='add 2-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) 2m33.005617439s ago: executing program 6 (id=1340): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r2}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, 0x0) 2m31.924511227s ago: executing program 6 (id=1350): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904000000ff000000"], 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x1dcd6500}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/firmware/emi26!loader.fw/data\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='\x00\x00\x00\x00\x00\x00', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='0\x00', 0x2) 2m30.036116855s ago: executing program 6 (id=1359): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd2a, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0x700000000000000}, 0x0) 2m16.643839178s ago: executing program 7 (id=1449): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b72040150000000000010902120001010080320904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x0, 0x3, "000202"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x118}]}, 0x24}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m14.169000563s ago: executing program 36 (id=1359): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd2a, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4, 0x700000000000000}, 0x0) 2m12.504640623s ago: executing program 7 (id=1463): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003f80000850000008600000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x29, 0x0, [{0x296, 0x0, 0x2}]}) 2m8.050255918s ago: executing program 7 (id=1477): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add 6', 0x5) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f0000000380)='add 2-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) 2m7.925572848s ago: executing program 7 (id=1478): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbcd246c00040008000300", @ANYRES32=r1, @ANYBLOB='\b\x00&\x00q\t'], 0x24}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000000)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x6}, @device_b, @from_mac=@device_b, @initial, {0x2, 0x7}, "", @void, @value=@ver_80211n={0x0, 0x3, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, @a_msdu}, 0x1c) 2m6.506084892s ago: executing program 7 (id=1484): mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./my_config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000a00)='./my_config/usb_gadget/g1/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='0', 0x1) 2m6.368426038s ago: executing program 7 (id=1485): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='0', 0x1) 2m0.108816125s ago: executing program 3 (id=1505): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904000000ff000000"], 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x1dcd6500}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/firmware/emi26!loader.fw/data\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='\x00\x00\x00\x00\x00\x00', 0x6) close(r1) write(0xffffffffffffffff, &(0x7f0000000a00)='0\x00', 0x2) close(0xffffffffffffffff) 1m56.991726927s ago: executing program 3 (id=1510): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b72040150000000000010902120001010080320904000000ff000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x0, 0x3, "000202"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x1, 0x9, 'build 123'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000300)={&(0x7f0000000600), 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x12c}]}, 0x24}}, 0x0) 1m53.676005082s ago: executing program 3 (id=1517): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x3) connect$inet6(r0, &(0x7f0000003c80)={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c) 1m53.614022072s ago: executing program 3 (id=1518): r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x30}], 0x21}, 0xe75}], 0x3aa0, 0x60002000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='1', 0x1) 1m51.532091528s ago: executing program 3 (id=1523): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='127.0.0.1', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='77', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x1, 0x0) write(r2, 0x0, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='1', 0x1) 1m51.397759408s ago: executing program 3 (id=1525): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003f800008500000086000000180100", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x29, 0x0, [{0x296, 0x0, 0x2}]}) 1m51.209377274s ago: executing program 37 (id=1485): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='0', 0x1) 1m35.944236188s ago: executing program 38 (id=1525): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003f800008500000086000000180100", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x29, 0x0, [{0x296, 0x0, 0x2}]}) 13.084026417s ago: executing program 8 (id=1806): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140), 0x0) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add 6', 0x5) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f0000000380)='add 2-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) 12.619262623s ago: executing program 8 (id=1808): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000440)='44100,48000,88200,96000,176400,192000,352800,384000,705600,7', 0x3c) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='44100,48000,88200,96000,176400,192000,352800,384000,705600,7', 0x3c) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000640)='usbip-vudc.0', 0xc) 11.859415815s ago: executing program 8 (id=1810): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 8.351995213s ago: executing program 5 (id=1816): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140), 0x0) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add 6', 0x5) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f0000000380)='add 2-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) 7.020181018s ago: executing program 5 (id=1818): syz_usb_connect(0x3, 0xf5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000010"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.816258621s ago: executing program 9 (id=1820): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbcd246c00040008000300", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000000)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x6}, @device_b, @from_mac=@device_b, @initial, {0x2, 0x7}, "", @void, @value=@ver_80211n={0x0, 0x3, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, @a_msdu}, 0x1c) 6.297054328s ago: executing program 5 (id=1821): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') write(0xffffffffffffffff, &(0x7f0000000540)='usbip-vudc.0\n', 0xd) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r0, &(0x7f0000000640)='3\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='-1', 0x2) 6.121367574s ago: executing program 5 (id=1822): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904000000ff000000"], 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x1dcd6500}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/firmware/emi26!loader.fw/data\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='\x00\x00\x00\x00\x00\x00', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='0\x00', 0x2) close(r2) 5.856223795s ago: executing program 9 (id=1823): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add 6', 0x5) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f0000000380)='add 2-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) 5.648120927s ago: executing program 9 (id=1824): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x2, 0x6, 0x4}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.23026915s ago: executing program 9 (id=1825): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='usbip-vudc.0\n', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='3\n', 0x2) write(0xffffffffffffffff, &(0x7f0000000640)='-1', 0x2) 5.008236499s ago: executing program 9 (id=1826): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 3.163963288s ago: executing program 9 (id=1827): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007008c7948"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 2.303857774s ago: executing program 5 (id=1828): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add ', 0x4) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add 6', 0x5) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f0000000380)='add 2-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) 2.066599158s ago: executing program 5 (id=1829): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b72040150000000000010902120001010080320904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x0, 0x3, "000202"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x118}]}, 0x24}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0xc0, 0x21, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.406950641s ago: executing program 8 (id=1830): add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffd) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000900)='syz \x00', 0x5) listen(r0, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0x2) add_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000600)="0100000002000800ffffff7f010000000011223344556677aabbccddeeff0011", 0x20, 0xfffffffd) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000a00)='syz \x00', 0x5) connect$rxrpc(r1, &(0x7f0000000700)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0xc351, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000d00)='hello', 0x5}], 0x1, &(0x7f0000000e00)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) 870.072539ms ago: executing program 8 (id=1831): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') write(0xffffffffffffffff, &(0x7f0000000b00)='\n\x00', 0x1) 0s ago: executing program 8 (id=1832): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000dc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = dup(r2) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, 0x0) kernel console output (not intermixed with test programs): 9 > 4 [ 342.983132][ T1178] hsr_slave_1: left promiscuous mode [ 342.983859][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.984472][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 343.076358][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.663163][ T5596] Bluetooth: hci6: command tx timeout [ 344.168816][ T1178] hsr_slave_0: left promiscuous mode [ 344.232133][ T1178] hsr_slave_1: left promiscuous mode [ 344.238635][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.263523][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.498188][ T5596] Bluetooth: hci7: command tx timeout [ 346.130376][ T7461] 9pnet_fd: p9_fd_create_tcp (7461): problem connecting socket to 127.0.0.1 [ 347.011320][ T5596] Bluetooth: hci6: command tx timeout [ 347.485587][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 347.806008][ T5596] Bluetooth: hci7: command tx timeout [ 348.043646][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 349.818008][ T5596] Bluetooth: hci7: command tx timeout [ 350.546777][ T7482] ubi: mtd0 is already attached to ubi0 [ 350.604412][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 350.684974][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 351.413331][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 351.464566][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 351.892862][ T5596] Bluetooth: hci7: command tx timeout [ 352.709304][ T5257] 8021q: adding VLAN 0 to HW filter on device eth14 [ 356.706169][ T7541] ubi: mtd0 is already attached to ubi0 [ 357.202355][ T5257] 8021q: adding VLAN 0 to HW filter on device eth15 [ 358.649606][ T7381] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.649728][ T7381] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.649844][ T7381] bridge_slave_0: entered allmulticast mode [ 358.651304][ T7381] bridge_slave_0: entered promiscuous mode [ 358.697000][ T7381] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.697093][ T7381] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.697210][ T7381] bridge_slave_1: entered allmulticast mode [ 358.698612][ T7381] bridge_slave_1: entered promiscuous mode [ 359.185569][ T7343] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.185720][ T7343] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.185901][ T7343] bridge_slave_0: entered allmulticast mode [ 359.188717][ T7343] bridge_slave_0: entered promiscuous mode [ 359.226235][ T7381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.226462][ T7343] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.226571][ T7343] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.226747][ T7343] bridge_slave_1: entered allmulticast mode [ 359.271111][ T7343] bridge_slave_1: entered promiscuous mode [ 360.218260][ T7381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.578914][ T7343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.637961][ T7343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.654147][ T7381] team0: Port device team_slave_0 added [ 360.683577][ T7381] team0: Port device team_slave_1 added [ 360.829186][ T7343] team0: Port device team_slave_0 added [ 360.918478][ T7343] team0: Port device team_slave_1 added [ 360.919693][ T7381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.919707][ T7381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.919730][ T7381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.099609][ T7381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.099625][ T7381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.099649][ T7381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.379370][ T7599] ubi: mtd0 is already attached to ubi0 [ 361.580818][ T7343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.580834][ T7343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.580859][ T7343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.683808][ T7441] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.683934][ T7441] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.684087][ T7441] bridge_slave_0: entered allmulticast mode [ 361.689831][ T7441] bridge_slave_0: entered promiscuous mode [ 361.719438][ T7343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.719454][ T7343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.719478][ T7343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.770051][ T7441] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.770145][ T7441] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.770354][ T7441] bridge_slave_1: entered allmulticast mode [ 361.774020][ T7441] bridge_slave_1: entered promiscuous mode [ 363.342124][ T7381] hsr_slave_0: entered promiscuous mode [ 363.355552][ T7381] hsr_slave_1: entered promiscuous mode [ 363.358634][ T7381] debugfs: 'hsr0' already exists in 'hsr' [ 363.358658][ T7381] Cannot create hsr debugfs directory [ 363.465692][ T7441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.524569][ T7441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.759629][ T7343] hsr_slave_0: entered promiscuous mode [ 363.762198][ T7343] hsr_slave_1: entered promiscuous mode [ 363.776567][ T7343] debugfs: 'hsr0' already exists in 'hsr' [ 363.776593][ T7343] Cannot create hsr debugfs directory [ 368.724767][ T7441] team0: Port device team_slave_0 added [ 369.794387][ T1178] bridge_slave_1: left allmulticast mode [ 369.794420][ T1178] bridge_slave_1: left promiscuous mode [ 369.794670][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.845779][ T7638] 9pnet_fd: p9_fd_create_tcp (7638): problem connecting socket to 127.0.0.1 [ 370.926292][ T1178] bridge_slave_0: left allmulticast mode [ 370.926327][ T1178] bridge_slave_0: left promiscuous mode [ 370.926555][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.244335][ T1178] bridge_slave_1: left allmulticast mode [ 371.244370][ T1178] bridge_slave_1: left promiscuous mode [ 371.244608][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.456035][ T7644] ubi: mtd0 is already attached to ubi0 [ 372.749646][ T1178] bridge_slave_0: left allmulticast mode [ 372.749681][ T1178] bridge_slave_0: left promiscuous mode [ 372.749921][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.466465][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.971950][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.054125][ T1178] bond0 (unregistering): Released all slaves [ 376.293393][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.374026][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.434252][ T1178] bond0 (unregistering): Released all slaves [ 376.456001][ T7441] team0: Port device team_slave_1 added [ 376.921004][ T7441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.921020][ T7441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.921041][ T7441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.016889][ T7441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.016906][ T7441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.016930][ T7441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.292594][ T1178] hsr_slave_0: left promiscuous mode [ 378.215790][ T1178] hsr_slave_1: left promiscuous mode [ 378.216747][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.256054][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.412827][ T1178] hsr_slave_0: left promiscuous mode [ 378.432779][ T1178] hsr_slave_1: left promiscuous mode [ 378.433814][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.483893][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.577306][ T7696] ubi: mtd0 is already attached to ubi0 [ 378.812709][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.812785][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.696762][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 379.753217][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 380.245007][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 380.315182][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 382.583742][ T7441] hsr_slave_0: entered promiscuous mode [ 382.585101][ T7441] hsr_slave_1: entered promiscuous mode [ 382.585976][ T7441] debugfs: 'hsr0' already exists in 'hsr' [ 382.585998][ T7441] Cannot create hsr debugfs directory [ 386.973513][ T7381] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 387.041069][ T7381] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 387.077281][ T7381] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 387.194114][ T7381] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 387.456067][ T7381] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 387.475798][ T7381] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 387.494906][ T7381] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 387.559272][ T7381] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 388.164820][ T7381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.224475][ T7381] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.287435][ T1020] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.287616][ T1020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.528866][ T6224] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.528965][ T6224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.243048][ T1178] bridge_slave_1: left allmulticast mode [ 390.243082][ T1178] bridge_slave_1: left promiscuous mode [ 390.243358][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.468592][ T1178] bridge_slave_0: left allmulticast mode [ 391.468624][ T1178] bridge_slave_0: left promiscuous mode [ 391.468880][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.890445][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 391.968411][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 392.018989][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 392.065663][ T5610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 392.105707][ T5610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 393.313927][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.393155][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.454166][ T1178] bond0 (unregistering): Released all slaves [ 394.440360][ T5610] Bluetooth: hci0: command tx timeout [ 395.183195][ T1178] hsr_slave_0: left promiscuous mode [ 395.222752][ T1178] hsr_slave_1: left promiscuous mode [ 395.223697][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.274223][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.059762][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 396.141859][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 396.452578][ T5610] Bluetooth: hci0: command tx timeout [ 398.542908][ T5610] Bluetooth: hci0: command tx timeout [ 399.526781][ T5596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 399.557062][ T5596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 400.400672][ T5596] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 400.409997][ T5596] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 400.410748][ T5596] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 400.615458][ T5610] Bluetooth: hci0: command tx timeout [ 401.030079][ T7441] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 401.200365][ T6046] libceph: connect (1)[c::]:6789 error -101 [ 401.222383][ T6046] libceph: mon0 (1)[c::]:6789 connect error [ 401.235986][ T7899] ceph: No mds server is up or the cluster is laggy [ 401.275025][ T6046] libceph: connect (1)[c::]:6789 error -101 [ 401.275235][ T6046] libceph: mon0 (1)[c::]:6789 connect error [ 402.502040][ T7441] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 402.532826][ T5610] Bluetooth: hci3: command tx timeout [ 402.601176][ T43] libceph: connect (1)[c::]:6789 error -101 [ 402.601364][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 402.666789][ T7441] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 402.709088][ T7441] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 402.781520][ T7441] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 402.949578][ T7441] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 403.740685][ T5596] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 403.778730][ T5596] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 403.794570][ T5596] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 403.795714][ T5596] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 403.801446][ T5596] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 404.626239][ T5610] Bluetooth: hci3: command tx timeout [ 405.876724][ T7800] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.878795][ T7800] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.878996][ T7800] bridge_slave_0: entered allmulticast mode [ 405.881671][ T7800] bridge_slave_0: entered promiscuous mode [ 405.893675][ T5610] Bluetooth: hci4: command tx timeout [ 406.746134][ T7800] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.746520][ T7800] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.746743][ T7800] bridge_slave_1: entered allmulticast mode [ 406.749579][ T7800] bridge_slave_1: entered promiscuous mode [ 406.808378][ T5610] Bluetooth: hci3: command tx timeout [ 407.139368][ T7800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.202023][ T7800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.423585][ T7800] team0: Port device team_slave_0 added [ 407.460841][ T7800] team0: Port device team_slave_1 added [ 407.562382][ T7800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.562398][ T7800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.562814][ T7800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.586545][ T7800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.586560][ T7800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.586583][ T7800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.632659][ T821] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 407.782695][ T821] usb 5-1: Using ep0 maxpacket: 32 [ 407.804864][ T821] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 407.804893][ T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.804911][ T821] usb 5-1: Product: syz [ 407.804924][ T821] usb 5-1: Manufacturer: syz [ 407.804942][ T821] usb 5-1: SerialNumber: syz [ 407.905795][ T7800] hsr_slave_0: entered promiscuous mode [ 407.906819][ T821] usb 5-1: config 0 descriptor?? [ 407.914783][ T7800] hsr_slave_1: entered promiscuous mode [ 407.948111][ T821] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 407.948736][ T821] dvb-usb: bulk message failed: -22 (4/0) [ 407.948790][ T821] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 407.948916][ T821] dvb-usb: bulk message failed: -22 (5/0) [ 407.948929][ T821] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 408.050213][ T821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 408.051582][ T821] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 408.051738][ T821] usb 5-1: media controller created [ 408.052591][ T5610] Bluetooth: hci4: command tx timeout [ 408.109369][ T821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 408.162737][ T821] usb 5-1: selecting invalid altsetting 3 [ 408.162764][ T821] ttusb2: set interface to alts=3 failed [ 408.286668][ T821] DVB: Unable to find symbol tda10086_attach() [ 408.286683][ T821] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 408.289785][ T821] dvb-usb: bulk message failed: -22 (4/0) [ 408.289803][ T821] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 408.289899][ T821] dvb-usb: bulk message failed: -22 (5/0) [ 408.289912][ T821] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 408.289959][ T821] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 408.452649][ T6449] usb 5-1: USB disconnect, device number 2 [ 408.709305][ T6449] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 408.852627][ T5610] Bluetooth: hci3: command tx timeout [ 409.302881][ T7887] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.303085][ T7887] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.303633][ T7887] bridge_slave_0: entered allmulticast mode [ 409.348815][ T7887] bridge_slave_0: entered promiscuous mode [ 409.776331][ T7887] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.776456][ T7887] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.776640][ T7887] bridge_slave_1: entered allmulticast mode [ 409.779105][ T7887] bridge_slave_1: entered promiscuous mode [ 409.827017][ T7923] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.827113][ T7923] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.827300][ T7923] bridge_slave_0: entered allmulticast mode [ 409.837925][ T7923] bridge_slave_0: entered promiscuous mode [ 409.931681][ T7923] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.931892][ T7923] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.932120][ T7923] bridge_slave_1: entered allmulticast mode [ 409.943380][ T7923] bridge_slave_1: entered promiscuous mode [ 410.052364][ T7887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.059232][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'. [ 410.059253][ T8025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.379'. [ 410.088669][ T8026] netlink: 'syz.3.379': attribute type 10 has an invalid length. [ 410.102083][ T7887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.133477][ T5610] Bluetooth: hci4: command tx timeout [ 410.510433][ T8026] bond0: (slave veth2): Enslaving as an active interface with an up link [ 410.527477][ T7923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.793490][ T1194] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.036111][ T7923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.078214][ T1194] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.112053][ T1194] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.125481][ T7887] team0: Port device team_slave_0 added [ 411.366909][ T1194] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.369052][ T7887] team0: Port device team_slave_1 added [ 411.467174][ T7923] team0: Port device team_slave_0 added [ 411.495344][ T7923] team0: Port device team_slave_1 added [ 411.534076][ T7887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.534089][ T7887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.534108][ T7887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.784255][ T7887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.784266][ T7887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.784280][ T7887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.785360][ T7923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.785369][ T7923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.785381][ T7923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.805427][ T7923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.805443][ T7923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.805466][ T7923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.212604][ T5610] Bluetooth: hci4: command tx timeout [ 412.656206][ T7887] hsr_slave_0: entered promiscuous mode [ 412.658109][ T7887] hsr_slave_1: entered promiscuous mode [ 412.659086][ T7887] debugfs: 'hsr0' already exists in 'hsr' [ 412.659108][ T7887] Cannot create hsr debugfs directory [ 412.840593][ T7923] hsr_slave_0: entered promiscuous mode [ 412.841505][ T7923] hsr_slave_1: entered promiscuous mode [ 412.842049][ T7923] debugfs: 'hsr0' already exists in 'hsr' [ 412.842064][ T7923] Cannot create hsr debugfs directory [ 413.945626][ T8060] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 414.070353][ T5610] Bluetooth: hci2: unexpected event for opcode 0x2010 [ 414.622810][ T1178] bridge_slave_1: left allmulticast mode [ 414.622861][ T1178] bridge_slave_1: left promiscuous mode [ 414.623066][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.733657][ T1178] bridge_slave_0: left allmulticast mode [ 414.733680][ T1178] bridge_slave_0: left promiscuous mode [ 414.733850][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.033524][ T1178] bridge_slave_1: left allmulticast mode [ 415.033561][ T1178] bridge_slave_1: left promiscuous mode [ 415.033804][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.215279][ T1178] bridge_slave_0: left allmulticast mode [ 415.215315][ T1178] bridge_slave_0: left promiscuous mode [ 415.215536][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.927822][ T8089] FAULT_INJECTION: forcing a failure. [ 415.927822][ T8089] name fail_page_alloc, interval 1, probability 1, space 0, times 1 [ 415.927855][ T8089] CPU: 1 UID: 0 PID: 8089 Comm: syz.3.403 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 415.927871][ T8089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 415.927883][ T8089] Call Trace: [ 415.927918][ T8089] [ 415.927969][ T8089] dump_stack_lvl+0xe8/0x150 [ 415.928093][ T8089] should_fail_ex+0x467/0x600 [ 415.928173][ T8089] prepare_alloc_pages+0x223/0x690 [ 415.928247][ T8089] __alloc_frozen_pages_noprof+0x12f/0x380 [ 415.928265][ T8089] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 415.928307][ T8089] ? __pfx_policy_nodemask+0x10/0x10 [ 415.928347][ T8089] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 415.928382][ T8089] ? rcu_is_watching+0x15/0xb0 [ 415.928462][ T8089] alloc_pages_mpol+0xce/0x280 [ 415.928481][ T8089] alloc_pages_noprof+0xd2/0x2f0 [ 415.928496][ T8089] get_zeroed_page_noprof+0x1a/0x90 [ 415.928517][ T8089] comedi_buf_alloc+0x3ca/0x8f0 [ 415.928619][ T8089] comedi_device_postconfig+0x59b/0xd00 [ 415.928640][ T8089] comedi_device_attach+0x554/0x730 [ 415.928657][ T8089] comedi_unlocked_ioctl+0x8f4/0x1af0 [ 415.928676][ T8089] ? kasan_quarantine_put+0xbb/0x1f0 [ 415.928708][ T8089] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 415.928729][ T8089] ? do_vfs_ioctl+0x1184/0x1550 [ 415.928799][ T8089] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 415.928813][ T8089] ? __pfx_smack_log+0x10/0x10 [ 415.928881][ T8089] ? smk_tskacc+0x2fb/0x370 [ 415.928898][ T8089] ? smack_file_ioctl+0x263/0x360 [ 415.928911][ T8089] ? __pfx_smack_file_ioctl+0x10/0x10 [ 415.928926][ T8089] ? __fget_files+0x2a/0x420 [ 415.928977][ T8089] ? __fget_files+0x3a8/0x420 [ 415.928987][ T8089] ? __fget_files+0x2a/0x420 [ 415.929000][ T8089] ? bpf_lsm_file_ioctl+0x9/0x20 [ 415.929043][ T8089] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 415.929054][ T8089] __se_sys_ioctl+0xff/0x170 [ 415.929068][ T8089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.929093][ T8089] do_syscall_64+0x174/0x580 [ 415.929175][ T8089] ? trace_irq_disable+0x3b/0x140 [ 415.929217][ T8089] ? clear_bhb_loop+0x40/0x90 [ 415.929230][ T8089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.929245][ T8089] RIP: 0033:0x7efffe96de99 [ 415.929267][ T8089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.929277][ T8089] RSP: 002b:00007efffcbc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 415.929298][ T8089] RAX: ffffffffffffffda RBX: 00007efffebf5fa0 RCX: 00007efffe96de99 [ 415.929305][ T8089] RDX: 00002000000003c0 RSI: 0000000040946400 RDI: 0000000000000004 [ 415.929313][ T8089] RBP: 00007efffea03eaf R08: 0000000000000000 R09: 0000000000000000 [ 415.929320][ T8089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.929326][ T8089] R13: 00007efffebf6038 R14: 00007efffebf5fa0 R15: 00007fffe46d1ef8 [ 415.929343][ T8089] [ 415.930412][ T8089] comedi comedi2: Buffer allocation failed [ 416.175787][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.255221][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.324076][ T1178] bond0 (unregistering): Released all slaves [ 416.687348][ T8095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 416.687471][ T8095] IPv6: NLM_F_CREATE should be set when creating new route [ 416.687487][ T8095] IPv6: NLM_F_CREATE should be set when creating new route [ 416.854931][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.934216][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.954708][ T1178] bond0 (unregistering): Released all slaves [ 417.066446][ T8072] bridge0: port 3(syz_tun) entered blocking state [ 417.066552][ T8072] bridge0: port 3(syz_tun) entered disabled state [ 417.066713][ T8072] syz_tun: entered allmulticast mode [ 417.068303][ T8072] syz_tun: entered promiscuous mode [ 417.069231][ T8072] bridge0: port 3(syz_tun) entered blocking state [ 417.069616][ T8072] bridge0: port 3(syz_tun) entered forwarding state [ 417.680352][ T8095] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.680656][ T8095] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.134896][ T5610] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 418.135140][ T5610] Bluetooth: hci2: Injecting HCI hardware error event [ 418.138083][ T5610] Bluetooth: hci2: hardware error 0x00 [ 418.389725][ T8095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.401964][ T8095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.681657][ T8107] FAULT_INJECTION: forcing a failure. [ 418.681657][ T8107] name failslab, interval 1, probability 1, space 0, times 1 [ 418.681694][ T8107] CPU: 1 UID: 0 PID: 8107 Comm: syz.4.410 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 418.681718][ T8107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 418.681730][ T8107] Call Trace: [ 418.681737][ T8107] [ 418.681746][ T8107] dump_stack_lvl+0xe8/0x150 [ 418.681784][ T8107] should_fail_ex+0x467/0x600 [ 418.681826][ T8107] should_failslab+0xa8/0x100 [ 418.681852][ T8107] __kmalloc_noprof+0xfe/0x780 [ 418.681952][ T8107] ? __local_bh_enable+0x1e1/0x2f0 [ 418.682028][ T8107] ? sock_kmalloc+0xd6/0x160 [ 418.682108][ T8107] ? sock_kmalloc+0xd6/0x160 [ 418.682141][ T8107] sock_kmalloc+0xd6/0x160 [ 418.682171][ T8107] hash_recvmsg+0x1d0/0x860 [ 418.682234][ T8107] ? __pfx_hash_recvmsg+0x10/0x10 [ 418.682259][ T8107] sock_recvmsg_nosec+0x130/0x170 [ 418.682352][ T8107] ____sys_recvmsg+0x3ef/0x4b0 [ 418.682387][ T8107] ? __pfx_____sys_recvmsg+0x10/0x10 [ 418.682426][ T8107] ? import_iovec+0x73/0xa0 [ 418.682480][ T8107] ___sys_recvmsg+0x213/0x5a0 [ 418.682509][ T8107] ? __pfx____sys_recvmsg+0x10/0x10 [ 418.682533][ T8107] ? preempt_schedule_common+0x82/0xd0 [ 418.682587][ T8107] ? __fget_files+0x2a/0x420 [ 418.682642][ T8107] do_recvmmsg+0x320/0x7f0 [ 418.682677][ T8107] ? __pfx_do_recvmmsg+0x10/0x10 [ 418.682704][ T8107] ? do_futex+0x458/0x4e0 [ 418.682775][ T8107] ? fd_install+0x97/0x3e0 [ 418.682809][ T8107] __x64_sys_recvmmsg+0x198/0x250 [ 418.682839][ T8107] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 418.682875][ T8107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.682906][ T8107] do_syscall_64+0x174/0x580 [ 418.682929][ T8107] ? trace_irq_disable+0x3b/0x140 [ 418.682965][ T8107] ? clear_bhb_loop+0x40/0x90 [ 418.682991][ T8107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.683010][ T8107] RIP: 0033:0x7fa20a20de99 [ 418.683029][ T8107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.683045][ T8107] RSP: 002b:00007fa208466028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 418.683067][ T8107] RAX: ffffffffffffffda RBX: 00007fa20a495fa0 RCX: 00007fa20a20de99 [ 418.683083][ T8107] RDX: 0000000000003aa0 RSI: 00002000000047c0 RDI: 0000000000000004 [ 418.683096][ T8107] RBP: 00007fa20a2a3eaf R08: 0000000000000000 R09: 0000000000000000 [ 418.683109][ T8107] R10: 0000000060002000 R11: 0000000000000246 R12: 0000000000000000 [ 418.683121][ T8107] R13: 00007fa20a496038 R14: 00007fa20a495fa0 R15: 00007ffc196ecdb8 [ 418.683154][ T8107] [ 419.034414][ T8110] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 419.826957][ T1194] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.826988][ T1194] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.880515][ T1194] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.880547][ T1194] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.919399][ T1194] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.919430][ T1194] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.950436][ T1194] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.950464][ T1194] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.134755][ T1178] hsr_slave_0: left promiscuous mode [ 420.178352][ T1178] hsr_slave_1: left promiscuous mode [ 420.179001][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.202971][ T8117] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 420.234882][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.373051][ T5610] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 420.450746][ T1178] hsr_slave_0: left promiscuous mode [ 420.488468][ T1178] hsr_slave_1: left promiscuous mode [ 420.489193][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.513420][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.368068][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 421.423455][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 421.425764][ T8136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.484013][ T8136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.553221][ T8137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.893932][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 421.943449][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 422.371291][ T7800] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 422.465331][ T7800] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 422.481622][ T7800] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 422.544320][ T7800] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 422.552300][ T7800] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 422.639883][ T7800] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 423.080908][ T7800] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 423.106876][ T7800] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 423.537912][ T5257] 8021q: adding VLAN 0 to HW filter on device eth13 [ 424.089851][ T7800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.187661][ T7800] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.209516][ T3375] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.209736][ T3375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.771597][ T3375] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.771733][ T3375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.783414][ T7800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.905741][ T8240] db_root: cannot open: /m [ 428.056153][ T7800] veth0_vlan: entered promiscuous mode [ 428.073393][ T7800] veth1_vlan: entered promiscuous mode [ 428.178609][ T7800] veth0_macvtap: entered promiscuous mode [ 428.189515][ T7800] veth1_macvtap: entered promiscuous mode [ 428.230429][ T7800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.269184][ T7800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.314634][ T3375] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.315402][ T3375] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.315441][ T3375] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.315474][ T3375] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.773447][ T1178] bridge_slave_1: left allmulticast mode [ 428.773481][ T1178] bridge_slave_1: left promiscuous mode [ 428.773736][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.935166][ T1178] bridge_slave_0: left allmulticast mode [ 428.935189][ T1178] bridge_slave_0: left promiscuous mode [ 428.935390][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.495390][ T8253] o2net: Error -99 while binding socket at 127.0.0.1:77 [ 429.713372][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.833327][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.925853][ T1178] bond0 (unregistering): Released all slaves [ 430.345098][ T5610] block nbd0: Receive control failed (result -107) [ 431.103633][ T3375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.103652][ T3375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.584719][ T7887] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 431.627071][ T7887] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 431.641596][ T7887] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 431.735951][ T7887] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 431.741077][ T793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.741094][ T793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.919888][ T7887] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 432.082414][ T7887] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 432.094236][ T7887] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 432.171024][ T7887] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 432.493985][ T1178] hsr_slave_0: left promiscuous mode [ 432.529791][ T8307] o2net: Error -99 while binding socket at 127.0.0.1:77 [ 432.543571][ T1178] hsr_slave_1: left promiscuous mode [ 432.544567][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.626316][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.724233][ T8195] Set syz1 is full, maxelem 65536 reached [ 433.141160][ T8323] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 433.270499][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 433.336610][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 433.753837][ T8334] scsi_nl_rcv_msg: discarding partial skb [ 433.810328][ T8326] bridge0: port 3(syz_tun) entered blocking state [ 433.810722][ T8326] bridge0: port 3(syz_tun) entered disabled state [ 433.810926][ T8326] syz_tun: entered allmulticast mode [ 433.848595][ T8326] syz_tun: entered promiscuous mode [ 434.593061][ T7923] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 434.756102][ T7923] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 434.831445][ T7923] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 435.008654][ T7923] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 435.028546][ T7923] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 435.263858][ T7923] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 435.269184][ T7923] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 435.342134][ T7923] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 435.487544][ T8389] syz.6.473 uses obsolete (PF_INET,SOCK_PACKET) [ 435.587511][ T8383] lo: entered promiscuous mode [ 435.592172][ T8383] tunl0: entered promiscuous mode [ 435.607835][ T8383] gre0: entered promiscuous mode [ 435.654167][ T8383] gretap0: entered promiscuous mode [ 435.695578][ T8383] erspan0: entered promiscuous mode [ 435.700122][ T8383] ip_vti0: entered promiscuous mode [ 435.702044][ T8383] ip6_vti0: entered promiscuous mode [ 435.708208][ T8383] sit0: entered promiscuous mode [ 435.731922][ T8383] ip6tnl0: entered promiscuous mode [ 435.753730][ T8383] ip6gre0: entered promiscuous mode [ 435.793552][ T8383] syz_tun: entered promiscuous mode [ 435.843350][ T8383] ip6gretap0: entered promiscuous mode [ 435.873943][ T8383] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.900085][ T8383] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.912931][ T8383] bridge0: entered promiscuous mode [ 435.929896][ T8383] vcan0: entered promiscuous mode [ 435.971967][ T8383] bond0: entered promiscuous mode [ 435.971989][ T8383] bond_slave_0: entered promiscuous mode [ 435.972218][ T8383] bond_slave_1: entered promiscuous mode [ 436.015930][ T8383] team0: entered promiscuous mode [ 436.015954][ T8383] team_slave_0: entered promiscuous mode [ 436.016281][ T8383] team_slave_1: entered promiscuous mode [ 436.092926][ T8383] dummy0: entered promiscuous mode [ 436.234668][ T8383] nlmon0: entered promiscuous mode [ 436.269449][ T8383] batadv0: entered promiscuous mode [ 436.311190][ T8383] vxcan0: entered promiscuous mode [ 436.317507][ T8383] vxcan1: entered promiscuous mode [ 436.325948][ T8383] veth0: entered promiscuous mode [ 436.374062][ T8383] veth1: entered promiscuous mode [ 436.413569][ T8383] wg0: entered promiscuous mode [ 436.454383][ T8383] wg1: entered promiscuous mode [ 436.495593][ T8383] wg2: entered promiscuous mode [ 436.503164][ T8383] veth0_to_bridge: entered promiscuous mode [ 436.567860][ T8383] veth1_to_bridge: entered promiscuous mode [ 436.593195][ T8383] veth0_to_bond: entered promiscuous mode [ 436.614705][ T8383] veth1_to_bond: entered promiscuous mode [ 436.635283][ T8383] veth0_to_team: entered promiscuous mode [ 436.655051][ T8383] veth1_to_team: entered promiscuous mode [ 436.719915][ T8383] veth0_to_batadv: entered promiscuous mode [ 436.796297][ T8383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.796410][ T8383] batadv_slave_0: entered promiscuous mode [ 436.810710][ T8383] veth1_to_batadv: entered promiscuous mode [ 436.841954][ T8383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.851490][ T8383] batadv_slave_1: entered promiscuous mode [ 436.879258][ T8383] xfrm0: entered promiscuous mode [ 436.908552][ T8383] veth0_to_hsr: entered promiscuous mode [ 436.967969][ T8383] veth1_to_hsr: entered promiscuous mode [ 436.991021][ T8383] hsr0: entered promiscuous mode [ 437.037073][ T8383] veth1_virt_wifi: entered promiscuous mode [ 437.049107][ T8383] veth0_virt_wifi: entered promiscuous mode [ 437.059126][ T8383] virt_wifi0: entered promiscuous mode [ 437.097123][ T8383] vlan0: entered promiscuous mode [ 437.116730][ T8383] vlan1: entered promiscuous mode [ 437.154303][ T8383] macvlan0: entered promiscuous mode [ 437.197087][ T8383] macvlan1: entered promiscuous mode [ 437.201954][ T8383] ipvlan0: entered promiscuous mode [ 437.202168][ T8383] ipvlan1: entered promiscuous mode [ 437.304892][ T8383] macvtap0: entered promiscuous mode [ 437.311161][ T8383] macsec0: entered promiscuous mode [ 437.327774][ T8383] geneve0: entered promiscuous mode [ 437.333153][ T8383] geneve1: entered promiscuous mode [ 437.432781][ T8383] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 437.503972][ T8383] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 437.604121][ T8383] netdevsim netdevsim6 netdevsim2: entered promiscuous mode [ 437.744021][ T8383] netdevsim netdevsim6 netdevsim3: entered promiscuous mode [ 438.049748][ T8383] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 438.263724][ T8383] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 438.266116][ T8383] syzkaller1: entered promiscuous mode [ 438.268365][ T8389] syzkaller1: left promiscuous mode [ 438.492849][ T821] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 438.515621][ T2932] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.544256][ T2932] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.574985][ T2932] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.590813][ T2932] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.649423][ T821] usb 4-1: Using ep0 maxpacket: 8 [ 438.688626][ T8468] syzkaller0: entered promiscuous mode [ 438.688652][ T8468] syzkaller0: entered allmulticast mode [ 438.702140][ T821] usb 4-1: config 0 has no interfaces? [ 438.702177][ T821] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 438.702198][ T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.733389][ T7887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.753472][ T821] usb 4-1: config 0 descriptor?? [ 439.001775][ T43] usb 4-1: USB disconnect, device number 3 [ 439.133608][ T7887] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.142799][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 439.178703][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.178909][ T3317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.221898][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.222074][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.327311][ T7923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.333319][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 439.336041][ T9] usb 7-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice= 1.00 [ 439.336066][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.385448][ T8478] batman_adv: batadv0: Adding interface: dummy0 [ 439.385463][ T8478] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.385493][ T8478] batman_adv: batadv0: Interface activated: dummy0 [ 439.460227][ T9] cytherm 7-1:1.0: Cypress thermometer device now attached [ 439.498705][ T8478] batadv0: mtu less than device minimum [ 439.509378][ T8478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 439.518803][ T8478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 439.529721][ T8478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 439.538457][ T8478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 439.557104][ T8478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 439.590381][ T8478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 439.619800][ T8478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 439.634623][ T8478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 439.642313][ T8478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 439.814652][ T7923] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.890262][ T793] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.890454][ T793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.979708][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.979803][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.061470][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.061518][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.331058][ T7887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.590077][ T7923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.890658][ T5792] usb 7-1: USB disconnect, device number 2 [ 441.901695][ T5792] cytherm 7-1:1.0: Cypress thermometer now disconnected [ 442.290313][ T7887] veth0_vlan: entered promiscuous mode [ 442.350885][ T7887] veth1_vlan: entered promiscuous mode [ 442.662842][ T7887] veth0_macvtap: entered promiscuous mode [ 442.670210][ T7923] veth0_vlan: entered promiscuous mode [ 442.684182][ T7887] veth1_macvtap: entered promiscuous mode [ 442.714002][ T7923] veth1_vlan: entered promiscuous mode [ 442.759595][ T7887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.811815][ T7887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.844687][ T2932] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.849701][ T2932] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.851089][ T2932] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.896913][ T2932] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.952882][ T7923] veth0_macvtap: entered promiscuous mode [ 443.062604][ T43] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 443.167745][ T7923] veth1_macvtap: entered promiscuous mode [ 443.223020][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 443.225472][ T43] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 443.225500][ T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 443.225523][ T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 443.225544][ T43] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.226966][ T43] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 443.226992][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.479194][ T7923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.566283][ T7923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.671110][ T793] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.682605][ T793] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.713675][ T43] usb 5-1: GET_CAPABILITIES returned 0 [ 443.713703][ T43] usbtmc 5-1:16.0: can't read capabilities [ 443.798575][ T793] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.830041][ T793] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.964436][ T793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.964458][ T793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.214907][ T43] usb 5-1: USB disconnect, device number 3 [ 444.690220][ T8597] netlink: 'syz.3.543': attribute type 4 has an invalid length. [ 444.690243][ T8597] netlink: 17 bytes leftover after parsing attributes in process `syz.3.543'. [ 444.719861][ T3317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.719881][ T3317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.987081][ T793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.987101][ T793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.160946][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.160966][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.121643][ T5610] block nbd1: Receive control failed (result -107) [ 449.473374][ T8644] usb usb9: usbfs: process 8644 (syz.7.558) did not claim interface 0 before use [ 451.514442][ T8657] ceph: No mds server is up or the cluster is laggy [ 451.520555][ T5698] libceph: connect (1)[c::]:6789 error -101 [ 451.520672][ T5698] libceph: mon0 (1)[c::]:6789 connect error [ 451.575192][ T8670] netlink: 44 bytes leftover after parsing attributes in process `syz.7.566'. [ 451.660204][ T8675] netlink: 'syz.7.566': attribute type 8 has an invalid length. [ 451.772541][ T8670] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.772917][ T5698] libceph: connect (1)[c::]:6789 error -101 [ 451.773072][ T5698] libceph: mon0 (1)[c::]:6789 connect error [ 451.861117][ T8670] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.368106][ T5610] block nbd2: Wrong magic (0x679512f0) [ 454.472562][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 454.622686][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 454.639330][ T10] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 454.639359][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.728688][ T10] usb 7-1: config 0 descriptor?? [ 454.808540][ T10] as10x_usb: device has been detected [ 454.809139][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 455.153331][ T10] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 455.439484][ T8792] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 455.461482][ T8792] CIFS: Attempting to mount //127.0.0.1/share [ 455.953968][ T10] as10x_usb: error during firmware upload part1 [ 455.954641][ T10] Registered device nBox DVB-T Dongle [ 456.004902][ T10] usb 7-1: USB disconnect, device number 3 [ 456.084267][ T5596] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 456.390649][ T8792] CIFS: VFS: cifs_mount failed w/return code = -512 [ 456.610753][ T10] Unregistered device nBox DVB-T Dongle [ 456.638665][ T10] as10x_usb: device has been disconnected [ 458.223547][ T8860] use of bytesused == 0 is deprecated and will be removed in the future, [ 458.223562][ T8860] use the actual size instead. [ 458.699362][ T5698] IPVS: starting estimator thread 0... [ 458.782616][ T8879] IPVS: using max 8 ests per chain, 19200 per kthread [ 459.500287][ T8906] usb usb9: usbfs: process 8906 (syz.4.665) did not claim interface 0 before use [ 460.310594][ T8943] usb usb9: usbfs: process 8943 (syz.3.682) did not claim interface 0 before use [ 460.511418][ T8950] net_ratelimit: 10 callbacks suppressed [ 460.511509][ T8950] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 460.512351][ T8950] batman_adv: batadv0: Interface deactivated: dummy0 [ 460.512374][ T8950] batman_adv: batadv0: Removing interface: dummy0 [ 462.272593][ T5743] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 462.433889][ T5743] usb 4-1: Using ep0 maxpacket: 8 [ 462.509023][ T5743] usb 4-1: config 0 has no interfaces? [ 462.509058][ T5743] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 462.509078][ T5743] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.512118][ T5743] usb 4-1: config 0 descriptor?? [ 463.370444][ T9049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.448013][ T9049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.588190][ T9049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.464749][ T9007] svc: failed to register lockdv1 RPC service (errno 111). [ 465.465443][ T9007] lockd_up: makesock failed, error=-111 [ 466.566765][ T9007] svc: failed to register nfsdv3 RPC service (errno 512). [ 466.567018][ T9007] svc: failed to register nfsaclv3 RPC service (errno 512). [ 466.567033][ T9007] failed to unregister tcp with rpcbind [ 466.615152][ T9007] svc: failed to register nfsdv3 RPC service (errno 97). [ 466.615174][ T9007] svc: failed to register nfsaclv3 RPC service (errno 97). [ 466.615181][ T9007] failed to unregister tcp with rpcbind [ 466.825281][ T10] usb 4-1: USB disconnect, device number 4 [ 467.028073][ T9135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.048592][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.6.767'. [ 467.116907][ T9135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.144680][ T9135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.147628][ T9135] warning: `syz.4.764' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 467.462617][ T5698] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 467.647859][ T5698] usb 4-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 467.647889][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 467.647907][ T5698] usb 4-1: Product: syz [ 467.647920][ T5698] usb 4-1: Manufacturer: syz [ 467.835856][ T5698] navman 4-1:1.0: navman converter detected [ 467.995242][ T5596] block nbd4: Receive control failed (result -107) [ 468.041194][ T5698] usb 4-1: navman converter now attached to ttyUSB0 [ 468.184151][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 468.343359][ T10] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 468.343387][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.862586][ T5698] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 468.963358][ T5743] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 468.963452][ T5743] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 468.963479][ T5743] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 468.963505][ T5743] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 468.963530][ T5743] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 468.963607][ T5743] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 468.963633][ T5743] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 468.963657][ T5743] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 468.963683][ T5743] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 468.963759][ T5743] hid-generic 0004:FFFFFFFF:0000.0001: unknown main item tag 0x0 [ 469.190925][ T5743] hid-generic 0004:FFFFFFFF:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 469.329906][ T5698] usb 8-1: config 0 has no interfaces? [ 469.329939][ T5698] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 469.329960][ T5698] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.523438][ T10] usb 7-1: ATUSB: AT86RF231 version 1 [ 469.587719][ T5698] usb 8-1: config 0 descriptor?? [ 469.729609][ T10] usb 7-1: Firmware: major: 0, minor: 2, hardware type: ATUSB (2) [ 470.021992][ T9] usb 4-1: USB disconnect, device number 5 [ 470.315135][ T9] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 470.382181][ T9] navman 4-1:1.0: device disconnected [ 470.409400][ T9194] gtp0: entered promiscuous mode [ 470.551590][ T5698] usb 8-1: USB disconnect, device number 2 [ 470.911771][ T36] audit: type=1800 audit(1785202496.039:2): pid=9208 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.792" name="bmAttributes" dev="configfs" ino=28602 res=0 errno=0 [ 471.346250][ T10] usb 7-1: USB disconnect, device number 4 [ 471.550451][ T9235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.716511][ T6046] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 471.877679][ T6046] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 471.877709][ T6046] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.984193][ T6046] usb 8-1: ATUSB: AT86RF231 version 1 [ 473.043619][ T9278] batman_adv: batadv0: Adding interface: dummy0 [ 473.043636][ T9278] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.043667][ T9278] batman_adv: batadv0: Interface activated: dummy0 [ 473.102642][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 473.188633][ T6046] usb 8-1: Firmware: major: 0, minor: 2, hardware type: ATUSB (2) [ 473.252618][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 473.258430][ T10] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 473.258476][ T10] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 473.258501][ T10] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 473.258528][ T10] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 473.261349][ T10] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 473.261377][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.261396][ T10] usb 7-1: Product: syz [ 473.261410][ T10] usb 7-1: Manufacturer: syz [ 473.261424][ T10] usb 7-1: SerialNumber: syz [ 473.374613][ T9278] batadv0: mtu less than device minimum [ 473.410353][ T9278] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 473.412117][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 473.434152][ T9278] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 473.451569][ T9278] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 473.462112][ T9278] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 473.483865][ T9278] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 473.498054][ T9278] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 473.513683][ T9278] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 473.522059][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input10 [ 473.530150][ T9278] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 473.552950][ T9278] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 473.657697][ T10] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 473.657719][ T10] (id 0x00) [ 473.844342][ T10] rc_core: IR keymap rc-imon-pad not found [ 473.844364][ T10] Registered IR keymap rc-empty [ 473.845225][ T10] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 473.845246][ T10] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 473.888900][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 473.906096][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input11 [ 473.933999][ T10] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:5> initialized [ 474.069241][ T43] usb 7-1: USB disconnect, device number 5 [ 474.271040][ T9302] block2mtd: error: cannot open device /dev/l [ 474.980910][ T9320] netlink: 'syz.6.837': attribute type 4 has an invalid length. [ 475.218084][ T9320] lo speed is unknown, defaulting to 1000 [ 475.254602][ T9320] lo speed is unknown, defaulting to 1000 [ 475.379357][ T9320] lo speed is unknown, defaulting to 1000 [ 475.597140][ T43] usb 8-1: USB disconnect, device number 3 [ 477.072582][ T43] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 477.225547][ T43] usb 8-1: Using ep0 maxpacket: 32 [ 477.227824][ T43] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 477.227849][ T43] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 477.227868][ T43] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 477.227914][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 477.227935][ T43] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 477.227958][ T43] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 477.227996][ T43] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 477.228017][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.257363][ T43] usb 8-1: config 0 descriptor?? [ 477.290087][ T9320] infiniband syz2: set down [ 477.290108][ T9320] infiniband syz2: added lo [ 477.302062][ T6046] lo speed is unknown, defaulting to 1000 [ 477.520005][ T43] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 477.734427][ T43] usb 8-1: USB disconnect, device number 4 [ 477.837626][ T43] usblp0: removed [ 478.086351][ T9320] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 478.086397][ T9320] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 478.086460][ T9320] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 478.224957][ T43] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 478.413314][ T36] audit: type=1804 audit(1785202503.579:3): pid=9399 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.873" name="/newroot/80/dir0/trace_marker" dev="tracefs" ino=3070 res=1 errno=0 [ 478.440256][ T43] usb 8-1: Using ep0 maxpacket: 32 [ 478.444149][ T43] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 478.444175][ T43] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 478.444194][ T43] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 478.444241][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 478.444261][ T43] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 478.444284][ T43] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 478.444321][ T43] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 478.444343][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.556830][ T43] usb 8-1: config 0 descriptor?? [ 478.849402][ T9320] RDS/IB: syz2: added [ 478.863494][ T9320] smc: adding ib device syz2 with port count 1 [ 478.863775][ T9320] smc: ib device syz2 port 1 has no pnetid [ 478.867059][ T10] lo speed is unknown, defaulting to 1000 [ 478.886854][ T43] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 478.920134][ T9320] lo speed is unknown, defaulting to 1000 [ 478.972801][ T9413] bridge0: port 3(syz_tun) entered blocking state [ 478.972908][ T9413] bridge0: port 3(syz_tun) entered disabled state [ 478.973113][ T9413] syz_tun: entered allmulticast mode [ 479.097826][ T9] usb 8-1: USB disconnect, device number 5 [ 479.101884][ T9413] syz_tun: entered promiscuous mode [ 479.106470][ T9413] bridge0: port 3(syz_tun) entered blocking state [ 479.115036][ T9413] bridge0: port 3(syz_tun) entered forwarding state [ 479.217473][ T9] usblp0: removed [ 480.157578][ T9320] lo speed is unknown, defaulting to 1000 [ 480.810179][ T9320] lo speed is unknown, defaulting to 1000 [ 480.909545][ T9459] vivid-000: unregistering video7 [ 480.963258][ T9459] vivid-000: unregistering video8 [ 480.965890][ T9459] vivid-000: unregistering vbi0 [ 481.002467][ T9459] vivid-000: unregistering vbi1 [ 481.072566][ T5698] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 481.212702][ T9459] vivid-000: unregistering swradio0 [ 481.230667][ T9459] vivid-000: unregistering radio0 [ 481.239615][ T9459] vivid-000: unregistering radio1 [ 481.261213][ T5698] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.290980][ T5698] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 481.291009][ T5698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.291029][ T5698] usb 6-1: Product: syz [ 481.291043][ T5698] usb 6-1: Manufacturer: syz [ 481.291057][ T5698] usb 6-1: SerialNumber: syz [ 481.365846][ T9459] vivid-000: unregistering video9 [ 481.472369][ T9459] vivid-000: unregistering video10 [ 481.582813][ T9459] vivid-000: unregistering v4l-touch0 [ 481.808117][ T5698] hackrf 6-1:1.0: Board ID: 00 [ 481.808138][ T5698] hackrf 6-1:1.0: Firmware version: [ 482.138015][ T5698] hackrf 6-1:1.0: Registered as swradio0 [ 482.239783][ T9320] lo speed is unknown, defaulting to 1000 [ 482.242422][ T5698] hackrf 6-1:1.0: Registered as swradio24 [ 482.242580][ T5698] hackrf 6-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 482.318752][ T9459] vivid-001: unregistering video11 [ 482.351957][ T9459] vivid-001: unregistering video12 [ 482.378260][ T9459] vivid-001: unregistering vbi2 [ 482.557830][ T9459] vivid-001: unregistering vbi3 [ 482.609864][ T9459] vivid-001: unregistering swradio1 [ 482.657606][ T9459] vivid-001: unregistering radio2 [ 482.676687][ T9459] vivid-001: unregistering radio3 [ 482.699582][ T9459] vivid-001: unregistering video13 [ 482.743212][ T9459] vivid-001: unregistering video14 [ 482.798568][ T9459] vivid-001: unregistering v4l-touch1 [ 482.995913][ T9459] vivid-002: unregistering video15 [ 483.002201][ T9459] vivid-002: unregistering video16 [ 483.040598][ T9459] vivid-002: unregistering vbi4 [ 483.060038][ T9459] vivid-002: unregistering vbi5 [ 483.113025][ T9459] vivid-002: unregistering swradio2 [ 483.195502][ T9459] vivid-002: unregistering radio4 [ 483.211593][ T9459] vivid-002: unregistering radio5 [ 483.214800][ T9459] vivid-002: unregistering video17 [ 483.238260][ T9459] vivid-002: unregistering video18 [ 483.339159][ T9459] vivid-002: unregistering v4l-touch2 [ 483.640972][ T9459] vivid-003: unregistering video19 [ 483.669574][ T9459] vivid-003: unregistering video20 [ 483.694849][ T9459] vivid-003: unregistering vbi6 [ 483.736063][ T9459] vivid-003: unregistering vbi7 [ 483.840994][ T9507] net_ratelimit: 10 callbacks suppressed [ 483.841012][ T9507] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 483.915650][ T9320] lo speed is unknown, defaulting to 1000 [ 483.917658][ T9459] vivid-003: unregistering swradio3 [ 483.927116][ T9459] vivid-003: unregistering radio6 [ 483.952021][ T9459] vivid-003: unregistering radio7 [ 484.030917][ T9459] vivid-003: unregistering video21 [ 484.062812][ T9459] vivid-003: unregistering video22 [ 484.108266][ T9459] vivid-003: unregistering v4l-touch3 [ 484.373963][ T9459] vivid-004: unregistering video23 [ 484.394756][ T9459] vivid-004: unregistering video24 [ 484.408753][ T9459] vivid-004: unregistering vbi8 [ 484.440281][ T9459] vivid-004: unregistering vbi9 [ 484.474362][ T9459] vivid-004: unregistering swradio4 [ 484.523751][ T9459] vivid-004: unregistering radio8 [ 484.564029][ T9459] vivid-004: unregistering radio9 [ 484.593565][ T9459] vivid-004: unregistering video25 [ 484.596585][ T9459] vivid-004: unregistering video26 [ 484.620425][ T9459] vivid-004: unregistering v4l-touch4 [ 484.793498][ T9459] vivid-005: unregistering video27 [ 484.800422][ T9459] vivid-005: unregistering video28 [ 484.821893][ T9459] vivid-005: unregistering vbi10 [ 484.864283][ T9459] vivid-005: unregistering vbi11 [ 484.895501][ T9459] vivid-005: unregistering swradio5 [ 484.909604][ T9459] vivid-005: unregistering radio10 [ 484.936549][ T9459] vivid-005: unregistering radio11 [ 484.949464][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 484.973981][ T9459] vivid-005: unregistering video29 [ 485.049424][ T9459] vivid-005: unregistering video30 [ 485.059858][ T9459] vivid-005: unregistering v4l-touch5 [ 485.094817][ T9] usb 8-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 485.094848][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.214501][ T9] emi26 - firmware loader 8-1:1.0: emi26_probe start [ 485.219767][ T9] usb 8-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 485.219822][ T9] usb 8-1: Falling back to sysfs fallback for: emi26/loader.fw [ 485.312868][ T9459] vivid-006: unregistering video31 [ 485.314654][ T9459] vivid-006: unregistering video32 [ 485.323084][ T9459] vivid-006: unregistering vbi12 [ 485.338835][ T9459] vivid-006: unregistering vbi13 [ 485.340690][ T9459] vivid-006: unregistering swradio6 [ 485.348557][ T9459] vivid-006: unregistering radio12 [ 485.366610][ T9459] vivid-006: unregistering radio13 [ 485.391329][ T9459] vivid-006: unregistering video33 [ 485.427100][ T9459] vivid-006: unregistering video34 [ 485.455690][ T9459] vivid-006: unregistering v4l-touch6 [ 485.778350][ T9459] vivid-007: unregistering video35 [ 485.781794][ T9459] vivid-007: unregistering video36 [ 485.862100][ T9] usb 8-1: emi26_load_firmware - request_firmware() failed [ 485.862123][ T9] usb 8-1: emi26_load_firmware - error loading firmware: error = -12 [ 485.862175][ T9] emi26 - firmware loader 8-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 485.895921][ T9] usb 8-1: USB disconnect, device number 6 [ 485.927367][ T9459] vivid-007: unregistering vbi14 [ 485.998587][ T9459] vivid-007: unregistering vbi15 [ 486.000291][ T9459] vivid-007: unregistering swradio7 [ 486.033390][ T9459] vivid-007: unregistering radio14 [ 486.039073][ T9459] vivid-007: unregistering radio15 [ 486.044473][ T9459] vivid-007: unregistering video37 [ 486.055547][ T9459] vivid-007: unregistering video38 [ 486.076700][ T9459] vivid-007: unregistering v4l-touch7 [ 486.284683][ T9459] vivid-008: unregistering video39 [ 486.295221][ T9459] vivid-008: unregistering video40 [ 486.300851][ T9459] vivid-008: unregistering vbi16 [ 486.326326][ T9459] vivid-008: unregistering vbi17 [ 486.351978][ T9459] vivid-008: unregistering swradio8 [ 486.368289][ T9459] vivid-008: unregistering radio16 [ 486.372292][ T9459] vivid-008: unregistering radio17 [ 486.380976][ T9459] vivid-008: unregistering video41 [ 486.391187][ T9459] vivid-008: unregistering video42 [ 486.408134][ T9459] vivid-008: unregistering v4l-touch8 [ 486.568019][ T9459] vivid-009: unregistering video43 [ 486.580491][ T9459] vivid-009: unregistering video44 [ 486.582242][ T9459] vivid-009: unregistering vbi18 [ 486.614373][ T9459] vivid-009: unregistering vbi19 [ 486.616201][ T9459] vivid-009: unregistering swradio9 [ 486.617962][ T9459] vivid-009: unregistering radio18 [ 486.619455][ T9459] vivid-009: unregistering radio19 [ 486.620676][ T9459] vivid-009: unregistering video45 [ 486.621911][ T9459] vivid-009: unregistering video46 [ 486.658916][ T9459] vivid-009: unregistering v4l-touch9 [ 486.820797][ T9459] vivid-010: unregistering video47 [ 486.841829][ T9459] vivid-010: unregistering video48 [ 486.853460][ T9459] vivid-010: unregistering vbi20 [ 486.861259][ T9459] vivid-010: unregistering vbi21 [ 486.872814][ T9459] vivid-010: unregistering swradio10 [ 486.876033][ T9459] vivid-010: unregistering radio20 [ 486.881638][ T9459] vivid-010: unregistering radio21 [ 486.885129][ T9459] vivid-010: unregistering video49 [ 486.894038][ T9459] vivid-010: unregistering video50 [ 486.901448][ T9459] vivid-010: unregistering v4l-touch10 [ 487.104310][ T9459] vivid-011: unregistering video51 [ 487.107413][ T9459] vivid-011: unregistering video52 [ 487.126807][ T9459] vivid-011: unregistering vbi22 [ 487.143500][ T9459] vivid-011: unregistering vbi23 [ 487.191905][ T9459] vivid-011: unregistering swradio11 [ 487.208504][ T9459] vivid-011: unregistering radio22 [ 487.211647][ T9459] vivid-011: unregistering radio23 [ 487.309219][ T9459] vivid-011: unregistering video53 [ 487.327050][ T9459] vivid-011: unregistering video54 [ 487.343262][ T9459] vivid-011: unregistering v4l-touch11 [ 487.518594][ T9459] vivid-012: unregistering video55 [ 487.530975][ T9459] vivid-012: unregistering video56 [ 487.558754][ T9459] vivid-012: unregistering vbi24 [ 487.579642][ T9459] vivid-012: unregistering vbi25 [ 487.653555][ T9459] vivid-012: unregistering swradio12 [ 487.666091][ T9459] vivid-012: unregistering radio24 [ 487.669328][ T9459] vivid-012: unregistering radio25 [ 487.686591][ T9459] vivid-012: unregistering video57 [ 487.694814][ T9459] vivid-012: unregistering video58 [ 487.710069][ T9459] vivid-012: unregistering v4l-touch12 [ 487.754376][ T9566] netlink: 'syz.6.941': attribute type 4 has an invalid length. [ 487.754398][ T9566] netlink: 9 bytes leftover after parsing attributes in process `syz.6.941'. [ 488.021070][ T9459] vivid-013: unregistering video59 [ 488.033016][ T9459] vivid-013: unregistering video60 [ 488.049782][ T9459] vivid-013: unregistering vbi26 [ 488.068183][ T9459] vivid-013: unregistering vbi27 [ 488.087200][ T9459] vivid-013: unregistering swradio13 [ 488.105092][ T9459] vivid-013: unregistering radio26 [ 488.145202][ T9577] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 488.201376][ T9580] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 488.227974][ T9459] vivid-013: unregistering radio27 [ 488.230970][ T9459] vivid-013: unregistering video61 [ 488.297632][ T9582] usbip-vudc usbip-vudc.0: Expecting SOCK_STREAM - found 3 [ 488.344997][ T9459] vivid-013: unregistering video62 [ 488.346600][ T9459] vivid-013: unregistering v4l-touch13 [ 488.520384][ T9459] vivid-014: unregistering video63 [ 488.552402][ T9459] vivid-014: unregistering video64 [ 488.573456][ T9459] vivid-014: unregistering vbi28 [ 488.611675][ T9459] vivid-014: unregistering vbi29 [ 488.613802][ T9459] vivid-014: unregistering swradio14 [ 488.623172][ T9459] vivid-014: unregistering radio28 [ 488.628157][ T9459] vivid-014: unregistering radio29 [ 488.647447][ T9459] vivid-014: unregistering video65 [ 488.659352][ T9459] vivid-014: unregistering video66 [ 488.671724][ T9459] vivid-014: unregistering v4l-touch14 [ 488.840202][ T9459] vivid-015: unregistering video67 [ 488.849241][ T9459] vivid-015: unregistering video68 [ 488.865532][ T9459] vivid-015: unregistering vbi30 [ 488.899420][ T9459] vivid-015: unregistering vbi31 [ 488.920261][ T9459] vivid-015: unregistering swradio15 [ 488.943491][ T9459] vivid-015: unregistering radio30 [ 488.953737][ T9459] vivid-015: unregistering radio31 [ 488.958842][ T9459] vivid-015: unregistering video69 [ 489.064608][ T9459] vivid-015: unregistering video70 [ 489.073692][ T9459] vivid-015: unregistering v4l-touch15 [ 489.269942][ T9459] vivid-016: unregistering video71 [ 489.283622][ T9459] vivid-016: unregistering video72 [ 489.288768][ T9459] vivid-016: unregistering vbi32 [ 489.295995][ T9459] vivid-016: unregistering vbi33 [ 489.314745][ T9459] vivid-016: unregistering swradio16 [ 489.377205][ T9459] vivid-016: unregistering radio32 [ 489.387638][ T9459] vivid-016: unregistering radio33 [ 489.415201][ T9459] vivid-016: unregistering video73 [ 489.430126][ T9459] vivid-016: unregistering video74 [ 489.438956][ T9459] vivid-016: unregistering v4l-touch16 [ 489.673129][ T9459] vivid-017: unregistering video75 [ 489.679010][ T9459] vivid-017: unregistering video76 [ 489.682348][ T9459] vivid-017: unregistering vbi34 [ 489.701589][ T9459] vivid-017: unregistering vbi35 [ 489.750932][ T9459] vivid-017: unregistering swradio17 [ 489.779615][ T9459] vivid-017: unregistering radio34 [ 489.790891][ T9459] vivid-017: unregistering radio35 [ 489.797464][ T9459] vivid-017: unregistering video77 [ 489.804688][ T9459] vivid-017: unregistering video78 [ 489.866989][ T9459] vivid-017: unregistering v4l-touch17 [ 490.176749][ T9459] vivid-018: unregistering video79 [ 490.179336][ T9459] vivid-018: unregistering video80 [ 490.221637][ T9459] vivid-018: unregistering vbi36 [ 490.236279][ T9459] vivid-018: unregistering vbi37 [ 490.251114][ T9459] vivid-018: unregistering swradio18 [ 490.263430][ T9459] vivid-018: unregistering radio36 [ 490.280326][ T9459] vivid-018: unregistering radio37 [ 490.306607][ T9459] vivid-018: unregistering video81 [ 490.317929][ T9459] vivid-018: unregistering video82 [ 490.328900][ T9459] vivid-018: unregistering v4l-touch18 [ 490.448167][ T9459] vivid-019: unregistering video83 [ 490.456071][ T9459] vivid-019: unregistering video84 [ 490.471900][ T9459] vivid-019: unregistering vbi38 [ 490.490208][ T9459] vivid-019: unregistering vbi39 [ 490.506167][ T9459] vivid-019: unregistering swradio19 [ 490.510176][ T9459] vivid-019: unregistering radio38 [ 490.522090][ T9459] vivid-019: unregistering radio39 [ 490.556938][ T9459] vivid-019: unregistering video85 [ 490.574707][ T9459] vivid-019: unregistering video86 [ 490.579182][ T9459] vivid-019: unregistering v4l-touch19 [ 490.710342][ T9459] vivid-020: unregistering video87 [ 490.718705][ T9459] vivid-020: unregistering video88 [ 490.724942][ T9459] vivid-020: unregistering vbi40 [ 490.741006][ T9459] vivid-020: unregistering vbi41 [ 490.749796][ T9459] vivid-020: unregistering swradio20 [ 490.758136][ T9459] vivid-020: unregistering radio40 [ 490.798259][ T9459] vivid-020: unregistering radio41 [ 490.812806][ T9459] vivid-020: unregistering video89 [ 490.825374][ T9459] vivid-020: unregistering video90 [ 490.833455][ T9459] vivid-020: unregistering v4l-touch20 [ 490.886685][ T9628] dummy0: left promiscuous mode [ 491.091188][ T9459] vivid-021: unregistering video91 [ 491.093005][ T9459] vivid-021: unregistering video92 [ 491.148013][ T9459] vivid-021: unregistering vbi42 [ 491.160552][ T9459] vivid-021: unregistering vbi43 [ 491.173209][ T9459] vivid-021: unregistering swradio21 [ 491.180913][ T9459] vivid-021: unregistering radio42 [ 491.191666][ T9459] vivid-021: unregistering radio43 [ 491.201612][ T9459] vivid-021: unregistering video93 [ 491.212530][ T9459] vivid-021: unregistering video94 [ 491.225633][ T9459] vivid-021: unregistering v4l-touch21 [ 491.337039][ T9459] vivid-022: unregistering video95 [ 491.341559][ T9459] vivid-022: unregistering video96 [ 491.349232][ T9459] vivid-022: unregistering vbi44 [ 491.369432][ T9459] vivid-022: unregistering vbi45 [ 491.372048][ T9459] vivid-022: unregistering swradio22 [ 491.397825][ T9459] vivid-022: unregistering radio44 [ 491.399429][ T9459] vivid-022: unregistering radio45 [ 491.403885][ T9459] vivid-022: unregistering video97 [ 491.408193][ T9459] vivid-022: unregistering video98 [ 491.417406][ T9459] vivid-022: unregistering v4l-touch22 [ 491.482802][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 491.537732][ T9459] vivid-023: unregistering video99 [ 491.566977][ T9459] vivid-023: unregistering video100 [ 491.568674][ T9459] vivid-023: unregistering vbi46 [ 491.578821][ T9459] vivid-023: unregistering vbi47 [ 491.585251][ T9459] vivid-023: unregistering swradio23 [ 491.588478][ T9459] vivid-023: unregistering radio46 [ 491.598030][ T9459] vivid-023: unregistering radio47 [ 491.601929][ T9459] vivid-023: unregistering video101 [ 491.606917][ T9459] vivid-023: unregistering video102 [ 491.611520][ T9459] vivid-023: unregistering v4l-touch23 [ 491.653013][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 491.670555][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.670586][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.670623][ T9] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 491.670644][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.712410][ T9] usb 8-1: config 0 descriptor?? [ 492.131445][ T43] usb 6-1: USB disconnect, device number 2 [ 492.345306][ T9639] 9p: Bad value for 'wfdno' [ 492.860188][ T9672] netlink: 'syz.3.989': attribute type 4 has an invalid length. [ 492.918793][ T9676] netlink: 'syz.3.989': attribute type 4 has an invalid length. [ 493.073548][ T9] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 493.078686][ T9] usb 8-1: USB disconnect, device number 7 [ 493.260276][ T9682] fido_id[9682]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 494.638182][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 494.701115][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 494.703688][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 494.704847][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 494.706006][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 495.147745][ T9743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.209009][ T9743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.319468][ T9743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.717355][ T9765] usbip_vudc: v_rx exit with error -32 [ 495.810985][ T9757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.826998][ T9757] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.895163][ T9757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.569923][ T9757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.614748][ T9757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.694515][ T9757] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 496.694540][ T9757] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 496.852678][ T5596] Bluetooth: hci5: command tx timeout [ 497.341076][ T9757] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 497.407120][ T9757] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 497.454467][ T9757] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 497.500936][ T9757] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 497.736766][ T9839] nbd: must specify a size in bytes for the device [ 497.756184][ T10] lo speed is unknown, defaulting to 1000 [ 497.756222][ T10] syz2: Port: 1 Link ACTIVE [ 497.838562][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.838823][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.850385][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.850519][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.411896][ T9859] nbd: must specify a size in bytes for the device [ 498.424171][ T2932] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.485370][ T197] lo speed is unknown, defaulting to 1000 [ 498.599142][ T2932] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.605534][ T2932] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.642632][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 498.689882][ T2932] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.822518][ T10] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 498.822546][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.933009][ T5596] Bluetooth: hci5: command tx timeout [ 499.167053][ T9727] lo speed is unknown, defaulting to 1000 [ 499.662568][ T43] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 499.812696][ T43] usb 8-1: Using ep0 maxpacket: 32 [ 499.823782][ T43] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 499.823809][ T43] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 499.823828][ T43] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 499.823875][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 499.823896][ T43] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 499.823919][ T43] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 499.823958][ T43] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 499.823980][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.839681][ T43] usb 8-1: config 0 descriptor?? [ 499.967844][ T10] usb 4-1: ATUSB: AT86RF231 version 1 [ 500.126961][ T43] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 500.170858][ T10] usb 4-1: Firmware: major: 0, minor: 2, hardware type: ATUSB (2) [ 500.276472][ T43] usb 8-1: USB disconnect, device number 8 [ 500.478926][ T43] usblp0: removed [ 500.952572][ T43] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 501.012745][ T5596] Bluetooth: hci5: command tx timeout [ 501.106484][ T43] usb 8-1: Using ep0 maxpacket: 32 [ 501.108665][ T43] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 501.108690][ T43] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 501.108710][ T43] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 501.108754][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 501.108773][ T43] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 501.108795][ T43] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 501.108832][ T43] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 501.108853][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.127186][ T43] usb 8-1: config 0 descriptor?? [ 501.424688][ T43] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 501.498911][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.498980][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.615523][ T43] usb 8-1: USB disconnect, device number 9 [ 501.691726][ T43] usblp0: removed [ 502.393948][ T9727] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.394113][ T9727] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.394265][ T9727] bridge_slave_0: entered allmulticast mode [ 502.398103][ T9727] bridge_slave_0: entered promiscuous mode [ 502.403300][ T9727] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.403388][ T9727] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.403534][ T9727] bridge_slave_1: entered allmulticast mode [ 502.407925][ T9727] bridge_slave_1: entered promiscuous mode [ 502.468460][ T9] usb 4-1: USB disconnect, device number 6 [ 502.836897][ T9727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.866474][ T9727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.092611][ T5596] Bluetooth: hci5: command tx timeout [ 503.137100][ T9727] team0: Port device team_slave_0 added [ 503.148396][ T9727] team0: Port device team_slave_1 added [ 503.222551][ T5743] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 503.278517][ T9727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.278528][ T9727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.278541][ T9727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.281462][ T9727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.281477][ T9727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.281492][ T9727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.357059][ T9727] hsr_slave_0: entered promiscuous mode [ 503.358369][ T9727] hsr_slave_1: entered promiscuous mode [ 503.359259][ T9727] debugfs: 'hsr0' already exists in 'hsr' [ 503.359282][ T9727] Cannot create hsr debugfs directory [ 503.462559][ T5743] usb 7-1: Using ep0 maxpacket: 32 [ 503.471384][ T5743] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 503.471409][ T5743] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 503.471426][ T5743] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 503.471469][ T5743] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 503.471486][ T5743] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 503.471505][ T5743] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 503.471541][ T5743] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 503.471561][ T5743] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.576189][ T5743] usb 7-1: config 0 descriptor?? [ 503.961605][ T5743] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 503.981125][ T5743] usb 7-1: USB disconnect, device number 6 [ 503.997965][ T5743] usblp0: removed [ 504.522952][ T5743] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 504.714521][ T5743] usb 7-1: Using ep0 maxpacket: 32 [ 504.719654][ T5743] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 504.719681][ T5743] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 504.719700][ T5743] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 504.719748][ T5743] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 504.719768][ T5743] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 504.719792][ T5743] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 504.719831][ T5743] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 504.719853][ T5743] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.819595][ T5743] usb 7-1: config 0 descriptor?? [ 505.067128][ T5743] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 505.157612][ T9727] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 505.265834][ T5698] usb 7-1: USB disconnect, device number 7 [ 505.272811][ T9727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 505.279727][ T9727] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 505.331228][ T5698] usblp0: removed [ 505.359698][ T9727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 505.365228][ T9727] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 505.445268][ T9727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 505.448168][ T9727] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 505.615924][ T9727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 506.097728][ T9727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.264636][ T9727] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.299638][ T1194] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.301331][ T1194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.345937][ T1194] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.346164][ T1194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.770022][ T9727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.997588][T10145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.540557][ T9727] veth0_vlan: entered promiscuous mode [ 508.643016][ T9727] veth1_vlan: entered promiscuous mode [ 508.804372][ T9727] veth0_macvtap: entered promiscuous mode [ 508.852102][ T9727] veth1_macvtap: entered promiscuous mode [ 508.891544][ T9727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.983129][ T9727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.129261][ T3025] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.141743][ T3025] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.144021][ T3025] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.150183][ T3025] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.413534][T10195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.542591][ T3025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.542611][ T3025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.767090][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 510.834334][ T1194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.834353][ T1194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.915058][ T9] usb 6-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 510.915087][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.014208][ T9] emi26 - firmware loader 6-1:1.0: emi26_probe start [ 511.015564][ T9] usb 6-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 511.015587][ T9] usb 6-1: Falling back to sysfs fallback for: emi26/loader.fw [ 511.090837][T10227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.421235][T10275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.487286][T10327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.578222][T10333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.672610][ T5698] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 514.860195][ T5698] usb 8-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 514.860221][ T5698] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.893399][ T5698] emi26 - firmware loader 8-1:1.0: emi26_probe start [ 514.924553][T10378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.966036][T10381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.554398][T10388] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 516.205894][T10409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.245401][T10453] batman_adv: batadv0: Interface deactivated: dummy0 [ 517.374448][ T821] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 517.545414][ T821] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 517.545445][ T821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.929722][T10465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.673516][ T821] usb 7-1: ATUSB: AT86RF231 version 1 [ 518.874604][ T821] usb 7-1: Firmware: major: 0, minor: 2, hardware type: ATUSB (2) [ 518.932970][ T5596] Bluetooth: hci0: command 0x0406 tx timeout [ 519.324390][T10483] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.1321'. [ 519.330142][T10481] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.1321'. [ 519.330497][T10482] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.1321'. [ 520.691626][T10500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.712632][ T821] usb 7-1: USB disconnect, device number 8 [ 521.851530][T10526] usbip-vudc usbip-vudc.0: Expecting SOCK_STREAM - found 3 [ 523.318266][ T6046] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 523.477016][ T6046] usb 7-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 523.477046][ T6046] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.529068][ T6046] emi26 - firmware loader 7-1:1.0: emi26_probe start [ 524.056536][ T5596] Bluetooth: hci3: command 0x0406 tx timeout [ 524.238810][T10566] usbip-vudc usbip-vudc.0: gadget not bound [ 525.465580][T10438] Set syz1 is full, maxelem 65536 reached [ 526.289242][T10623] usbip-vudc usbip-vudc.0: gadget not bound [ 527.238232][T10646] usbip-vudc usbip-vudc.0: gadget not bound [ 529.048598][T10680] CIFS: VFS: Unknown vers= option specified: -B]ąRB ,gWy 2"/>4Z ҄FYcIGQB*0⑒V&SmZ)`sAk!Owz"RLL|ZuWG4&޺[G [ 533.537662][T10743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.245482][T10753] usbip-vudc usbip-vudc.0: gadget not bound [ 536.952801][T10774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.987449][T10776] usbip-vudc usbip-vudc.0: Expecting SOCK_STREAM - found 3 [ 539.688892][T10803] capability: warning: `syz.5.1456' uses 32-bit capabilities (legacy support in use) [ 540.056806][T10805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.108231][ T5596] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 541.184453][ T5596] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 541.202213][ T5596] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 541.313946][ T5596] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 541.314727][ T5596] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 542.041022][T10811] lo speed is unknown, defaulting to 1000 [ 543.492641][ T5596] Bluetooth: hci6: command tx timeout [ 544.180136][T10811] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.180344][T10811] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.180578][T10811] bridge_slave_0: entered allmulticast mode [ 544.234780][T10811] bridge_slave_0: entered promiscuous mode [ 544.253472][T10811] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.254201][T10811] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.254375][T10811] bridge_slave_1: entered allmulticast mode [ 544.256684][T10811] bridge_slave_1: entered promiscuous mode [ 544.353907][T10811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.384251][T10811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.449235][T10811] team0: Port device team_slave_0 added [ 544.452128][T10811] team0: Port device team_slave_1 added [ 544.497053][T10811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.497068][T10811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.497087][T10811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.499121][T10811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.499133][T10811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.499152][T10811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.503721][T10846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.698693][T10811] hsr_slave_0: entered promiscuous mode [ 544.700339][T10811] hsr_slave_1: entered promiscuous mode [ 544.701486][T10811] debugfs: 'hsr0' already exists in 'hsr' [ 544.701511][T10811] Cannot create hsr debugfs directory [ 544.946636][ T5596] Bluetooth: hci5: command 0x0406 tx timeout [ 545.575165][ T5596] Bluetooth: hci6: command tx timeout [ 547.655914][ T59] Bluetooth: hci6: command tx timeout [ 547.659896][T10872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.236778][T10811] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 549.664029][T10811] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 549.667149][T10811] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 549.734146][ T59] Bluetooth: hci6: command tx timeout [ 549.855819][T10811] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 549.858443][T10811] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 550.149616][T10811] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 550.406030][T10811] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 550.432611][ T43] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 550.464269][T10904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.514484][T10811] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 550.584793][ T43] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 550.584823][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.638899][ T43] emi26 - firmware loader 4-1:1.0: emi26_probe start [ 550.954799][T10811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.103271][T10811] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.127907][ T1194] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.130594][ T1194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.294496][ T1178] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.295989][ T1178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.649877][T10811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.132014][T10811] veth0_vlan: entered promiscuous mode [ 553.194479][T10811] veth1_vlan: entered promiscuous mode [ 553.480053][T10811] veth0_macvtap: entered promiscuous mode [ 553.512964][T10811] veth1_macvtap: entered promiscuous mode [ 553.545026][T10811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.604471][T10811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.651430][ T1194] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.651683][ T1194] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.651715][ T1194] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.651741][ T1194] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.351121][T10952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.641687][ T3317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.641707][ T3317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.770366][ T3375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.770384][ T3375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.762773][T10997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.948448][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.948517][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.879549][ T5603] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 564.888794][ T5603] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 564.947182][ T5603] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 564.962624][ T5603] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 564.967110][ T5603] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 565.694414][T11025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.974239][T11012] lo speed is unknown, defaulting to 1000 [ 567.179158][ T5603] Bluetooth: hci7: command tx timeout [ 569.252899][ T5603] Bluetooth: hci7: command tx timeout [ 570.154910][T11053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 571.333019][ T5603] Bluetooth: hci7: command tx timeout [ 572.397514][T11012] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.397723][T11012] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.398276][T11012] bridge_slave_0: entered allmulticast mode [ 572.431092][T11012] bridge_slave_0: entered promiscuous mode [ 572.459252][T11012] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.462743][T11012] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.477685][T11012] bridge_slave_1: entered allmulticast mode [ 572.485710][T11012] bridge_slave_1: entered promiscuous mode [ 572.712231][T11012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.739161][T11012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.964826][T11012] team0: Port device team_slave_0 added [ 572.988539][T11012] team0: Port device team_slave_1 added [ 573.102420][T11012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.103098][T11012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.103127][T11012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.108501][T11012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.108515][T11012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.108535][T11012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.413068][ T5603] Bluetooth: hci7: command tx timeout [ 573.547212][T11012] hsr_slave_0: entered promiscuous mode [ 573.560501][T11012] hsr_slave_1: entered promiscuous mode [ 573.561348][T11012] debugfs: 'hsr0' already exists in 'hsr' [ 573.561367][T11012] Cannot create hsr debugfs directory [ 573.927003][ T6046] usb 7-1: emi26_load_firmware - request_firmware() failed [ 573.927027][ T6046] usb 7-1: emi26_load_firmware - error loading firmware: error = -2 [ 573.927102][ T6046] emi26 - firmware loader 7-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 573.932109][ T5698] usb 8-1: emi26_load_firmware - request_firmware() failed [ 573.932132][ T5698] usb 8-1: emi26_load_firmware - error loading firmware: error = -2 [ 573.932197][ T5698] emi26 - firmware loader 8-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 573.932273][ T43] usb 4-1: emi26_load_firmware - request_firmware() failed [ 573.932287][ T43] usb 4-1: emi26_load_firmware - error loading firmware: error = -2 [ 573.932344][ T43] emi26 - firmware loader 4-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 574.188383][ T43] usb 4-1: USB disconnect, device number 7 [ 574.328825][ T5698] usb 8-1: USB disconnect, device number 10 [ 574.442259][ T6046] usb 7-1: USB disconnect, device number 9 [ 574.762231][ T9] usb 6-1: emi26_load_firmware - request_firmware() failed [ 574.762254][ T9] usb 6-1: emi26_load_firmware - error loading firmware: error = -110 [ 574.762314][ T9] emi26 - firmware loader 6-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 574.873120][ T5728] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 574.992673][ T9] usb 6-1: USB disconnect, device number 3 [ 575.035467][ T5728] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00 [ 575.035499][ T5728] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.253854][ T5728] usb 10-1: ATUSB: AT86RF231 version 1 [ 576.462272][ T5728] usb 10-1: Firmware: major: 0, minor: 2, hardware type: ATUSB (2) [ 576.933634][T11102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.615315][ T5728] usb 10-1: USB disconnect, device number 2 [ 578.482661][ T43] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 578.746808][ T43] usb 6-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 578.746837][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.904487][ T43] emi26 - firmware loader 6-1:1.0: emi26_probe start [ 578.919370][ T43] usb 6-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 578.919399][ T43] usb 6-1: Falling back to sysfs fallback for: emi26/loader.fw [ 580.150779][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 580.208706][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 580.283989][T11125] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 580.323452][T11125] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 580.324214][T11125] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 582.781314][T11125] Bluetooth: hci4: command tx timeout [ 583.251115][T11142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.852627][T11125] Bluetooth: hci4: command tx timeout [ 586.932598][T11125] Bluetooth: hci4: command tx timeout [ 587.381076][T11003] syz_tun (unregistering): left allmulticast mode [ 587.381109][T11003] syz_tun (unregistering): left promiscuous mode [ 587.381216][T11003] bridge0: port 3(syz_tun) entered disabled state [ 588.544643][ T5610] block nbd3: Receive control failed (result -110) [ 589.012807][ T5610] Bluetooth: hci4: command tx timeout [ 590.377888][T11123] lo speed is unknown, defaulting to 1000 [ 592.474321][T11215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.477136][T11123] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.477263][T11123] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.477599][T11123] bridge_slave_0: entered allmulticast mode [ 593.522744][T11123] bridge_slave_0: entered promiscuous mode [ 593.584879][T11123] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.585010][T11123] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.585271][T11123] bridge_slave_1: entered allmulticast mode [ 593.635061][T11123] bridge_slave_1: entered promiscuous mode [ 594.084545][T11123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.119241][T11123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.870873][T11123] team0: Port device team_slave_0 added [ 595.902226][T11123] team0: Port device team_slave_1 added [ 596.127993][T11269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.269584][T11123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.269602][T11123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.269626][T11123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.272217][T11123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.272232][T11123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.272256][T11123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.522292][T11123] hsr_slave_0: entered promiscuous mode [ 596.545622][T11123] hsr_slave_1: entered promiscuous mode [ 596.549791][T11123] debugfs: 'hsr0' already exists in 'hsr' [ 596.549817][T11123] Cannot create hsr debugfs directory [ 599.627100][T11292] usbip_vudc: v_rx exit with error -32 [ 601.253234][T11303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 601.304126][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.737770][T11329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.040095][T11356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.278029][T11382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.408924][T11410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.151119][T11437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 621.512681][T11455] usbip-vudc usbip-vudc.0: Expecting SOCK_STREAM - found 3 [ 621.568336][T11456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.193168][T11125] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 624.270699][T11125] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 624.286058][T11125] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 624.318729][T11125] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 624.319496][T11125] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 624.401679][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.401736][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.694823][T11475] lo speed is unknown, defaulting to 1000 [ 626.127460][T11497] usbip-vudc usbip-vudc.0: Expecting SOCK_STREAM - found 3 [ 626.462732][ T5610] Bluetooth: hci2: command tx timeout [ 626.939589][T11475] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.940914][T11475] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.941148][T11475] bridge_slave_0: entered allmulticast mode [ 626.966765][T11475] bridge_slave_0: entered promiscuous mode [ 626.970288][T11475] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.970490][T11475] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.970692][T11475] bridge_slave_1: entered allmulticast mode [ 627.000498][T11475] bridge_slave_1: entered promiscuous mode [ 627.055070][T11475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.059279][T11475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.125371][T11475] team0: Port device team_slave_0 added [ 627.128460][T11475] team0: Port device team_slave_1 added [ 627.235093][T11475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.235111][T11475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.235136][T11475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.237334][T11475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.237347][T11475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.237365][T11475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.754630][T11511] usbip_vudc: v_rx exit with error -32 [ 628.532690][ T5610] Bluetooth: hci2: command tx timeout [ 628.903097][T11517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.614169][ T5610] Bluetooth: hci2: command tx timeout [ 632.139752][T11475] hsr_slave_0: entered promiscuous mode [ 632.141273][T11475] hsr_slave_1: entered promiscuous mode [ 632.142316][T11475] debugfs: 'hsr0' already exists in 'hsr' [ 632.142341][T11475] Cannot create hsr debugfs directory [ 632.692792][ T5610] Bluetooth: hci2: command tx timeout [ 632.938209][T11557] usbip_vudc: v_rx exit with error -32 [ 637.294393][T11626] usbip-vudc usbip-vudc.0: Device not connected [ 639.806221][T11125] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 639.859265][T11125] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 639.860733][T11125] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 639.940567][T11125] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 639.950573][T11125] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 640.038697][ T43] usb 6-1: emi26_load_firmware - request_firmware() failed [ 640.038721][ T43] usb 6-1: emi26_load_firmware - error loading firmware: error = -110 [ 640.038781][ T43] emi26 - firmware loader 6-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 640.450464][ T43] usb 6-1: USB disconnect, device number 4 [ 641.374693][T11650] lo speed is unknown, defaulting to 1000 [ 642.293086][ T5610] Bluetooth: hci8: command tx timeout [ 642.858804][T11650] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.858935][T11650] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.859188][T11650] bridge_slave_0: entered allmulticast mode [ 642.886234][T11650] bridge_slave_0: entered promiscuous mode [ 642.892311][T11650] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.907544][T11650] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.907812][T11650] bridge_slave_1: entered allmulticast mode [ 642.911617][T11650] bridge_slave_1: entered promiscuous mode [ 643.025586][T11650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.060362][T11650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.273887][T11650] team0: Port device team_slave_0 added [ 643.676306][T11650] team0: Port device team_slave_1 added [ 643.907216][T11650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.907232][T11650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.907896][T11650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.918702][T11650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.918718][T11650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.918744][T11650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.374026][ T5610] Bluetooth: hci8: command tx timeout [ 644.512272][T11650] hsr_slave_0: entered promiscuous mode [ 644.514500][T11650] hsr_slave_1: entered promiscuous mode [ 644.518647][T11650] debugfs: 'hsr0' already exists in 'hsr' [ 644.518684][T11650] Cannot create hsr debugfs directory [ 645.090179][T11712] usbip-vudc usbip-vudc.0: gadget not bound [ 645.352680][ T5728] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 645.507743][ T5728] usb 10-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 645.507774][ T5728] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.707381][ T5728] emi26 - firmware loader 10-1:1.0: emi26_probe start [ 645.724736][ T5728] usb 10-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 645.724764][ T5728] usb 10-1: Falling back to sysfs fallback for: emi26/loader.fw [ 646.453724][ T5610] Bluetooth: hci8: command tx timeout [ 646.516824][ T5728] usb 10-1: emi26_load_firmware - request_firmware() failed [ 646.516848][ T5728] usb 10-1: emi26_load_firmware - error loading firmware: error = -12 [ 646.516910][ T5728] emi26 - firmware loader 10-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 646.558825][ T5728] usb 10-1: USB disconnect, device number 3 [ 647.821325][T11728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.533310][ T5610] Bluetooth: hci8: command tx timeout [ 649.704908][T11745] usbip_vudc: v_rx exit with error -32 [ 652.237633][T11760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 652.405537][T11765] usbip_vudc: v_rx exit with error -32 [ 653.192704][ T5728] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 653.390894][ T5728] usb 10-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 653.390925][ T5728] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.484013][ T5728] emi26 - firmware loader 10-1:1.0: emi26_probe start [ 653.491755][ T5728] usb 10-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 653.491800][ T5728] usb 10-1: Falling back to sysfs fallback for: emi26/loader.fw [ 653.755593][ T5728] usb 10-1: Direct firmware load for emi26/bitstream.fw failed with error -2 [ 653.755621][ T5728] usb 10-1: Falling back to sysfs fallback for: emi26/bitstream.fw [ 656.239513][T11791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.965228][T11813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 663.050816][T11846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1809'. [ 663.186350][T11846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.092603][ T6046] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 664.245255][ T6046] usb 6-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 664.245287][ T6046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.401390][ T6046] emi26 - firmware loader 6-1:1.0: emi26_probe start [ 667.423592][ T5610] Bluetooth: hci6: command 0x0406 tx timeout [ 668.375602][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1820'. [ 668.397654][T11869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.649513][T11872] usbip_vudc: v_rx exit with error -32 [ 669.732831][T11882] usbip_vudc: v_rx exit with error -32 [ 673.318661][T11848] Set syz1 is full, maxelem 65536 reached [ 676.853629][ T37] INFO: task syz.6.1359:10579 blocked for more than 143 seconds. [ 676.853656][ T37] Not tainted syzkaller #0 [ 676.853666][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 676.853675][ T37] task:syz.6.1359 state:D stack:26672 pid:10579 tgid:10578 ppid:7800 task_flags:0x400140 flags:0x00080002 [ 676.853732][ T37] Call Trace: [ 676.853740][ T37] [ 676.853753][ T37] __schedule+0x16dc/0x5500 [ 676.853803][ T37] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 676.853827][ T37] ? irqentry_exit+0x218/0x8f0 [ 676.853850][ T37] ? trace_irq_disable+0x3b/0x140 [ 676.853875][ T37] ? __pfx___schedule+0x10/0x10 [ 676.853893][ T37] ? rt_mutex_slowlock_block+0x33a/0x680 [ 676.854011][ T37] rt_mutex_schedule+0x76/0xf0 [ 676.854069][ T37] rt_mutex_slowlock_block+0x55c/0x680 [ 676.854107][ T37] ? rt_mutex_slowlock_block+0x33a/0x680 [ 676.854138][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 676.854166][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 676.854193][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 676.854231][ T37] ? nfsd_nl_listener_set_doit+0x136/0x16e0 [ 676.854342][ T37] ? nfsd_nl_listener_set_doit+0x136/0x16e0 [ 676.854375][ T37] ? nfsd_nl_listener_set_doit+0x136/0x16e0 [ 676.854406][ T37] mutex_lock_nested+0x168/0x1d0 [ 676.854442][ T37] nfsd_nl_listener_set_doit+0x136/0x16e0 [ 676.854467][ T37] ? __pfx___nla_validate_parse+0x10/0x10 [ 676.854508][ T37] ? rcu_is_watching+0x15/0xb0 [ 676.854536][ T37] ? trace_kmalloc+0x2a/0xf0 [ 676.854559][ T37] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 676.854592][ T37] ? __kmalloc_noprof+0x43b/0x780 [ 676.854616][ T37] ? __nla_parse+0x40/0x60 [ 676.854640][ T37] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 676.854708][ T37] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 676.854735][ T37] genl_family_rcv_msg_doit+0x233/0x340 [ 676.854799][ T37] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 676.854857][ T37] ? bpf_lsm_capable+0x9/0x20 [ 676.855416][ T37] ? security_capable+0x7e/0x2c0 [ 676.855766][ T37] genl_rcv_msg+0x614/0x7a0 [ 676.855818][ T37] ? __pfx_genl_rcv_msg+0x10/0x10 [ 676.855845][ T37] ? ref_tracker_free+0x668/0x820 [ 676.855920][ T37] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 676.855973][ T37] ? __pfx_ref_tracker_free+0x10/0x10 [ 676.855993][ T37] ? __asan_memcpy+0x40/0x70 [ 676.856051][ T37] ? __skb_clone+0x5c/0x6c0 [ 676.856115][ T37] netlink_rcv_skb+0x226/0x4a0 [ 676.933266][ T37] ? __pfx_genl_rcv_msg+0x10/0x10 [ 676.933313][ T37] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 676.933351][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 676.933375][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 676.933403][ T37] genl_rcv+0x28/0x40 [ 676.933431][ T37] netlink_unicast+0x7f5/0x990 [ 676.933462][ T37] netlink_sendmsg+0x813/0xb40 [ 676.933496][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 676.933523][ T37] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 676.933625][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 676.933649][ T37] sock_sendmsg_nosec+0x13a/0x180 [ 676.933684][ T37] ____sys_sendmsg+0x565/0x870 [ 676.933781][ T37] ? __might_fault+0xaf/0x130 [ 676.933853][ T37] ? __pfx_____sys_sendmsg+0x10/0x10 [ 676.933886][ T37] ? import_iovec+0x73/0xa0 [ 676.933914][ T37] ___sys_sendmsg+0x2a5/0x360 [ 676.933938][ T37] ? __lock_acquire+0x683/0x2ce0 [ 676.934058][ T37] ? __pfx____sys_sendmsg+0x10/0x10 [ 676.934087][ T37] ? futex_wait+0x2a2/0x390 [ 676.934154][ T37] ? __fget_files+0x2a/0x420 [ 676.934175][ T37] ? __fget_files+0x3a8/0x420 [ 676.934206][ T37] __x64_sys_sendmsg+0x1b7/0x290 [ 676.934299][ T37] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 676.934396][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.934420][ T37] do_syscall_64+0x174/0x580 [ 676.934445][ T37] ? trace_irq_disable+0x3b/0x140 [ 676.934472][ T37] ? clear_bhb_loop+0x40/0x90 [ 676.934495][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.934516][ T37] RIP: 0033:0x7fc65a2ede99 [ 676.934534][ T37] RSP: 002b:00007fc658546028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 676.934556][ T37] RAX: ffffffffffffffda RBX: 00007fc65a575fa0 RCX: 00007fc65a2ede99 [ 676.934571][ T37] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 676.934583][ T37] RBP: 00007fc65a383eaf R08: 0000000000000000 R09: 0000000000000000 [ 676.934596][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.934608][ T37] R13: 00007fc65a576038 R14: 00007fc65a575fa0 R15: 00007fff3af54938 [ 676.934639][ T37] [ 676.934648][ T37] INFO: task syz.6.1359:10581 blocked for more than 143 seconds. [ 676.934664][ T37] Not tainted syzkaller #0 [ 676.934674][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 676.934682][ T37] task:syz.6.1359 state:D stack:25800 pid:10581 tgid:10578 ppid:7800 task_flags:0x400140 flags:0x00080002 [ 676.934735][ T37] Call Trace: [ 676.934742][ T37] [ 676.934753][ T37] __schedule+0x16dc/0x5500 [ 676.934781][ T37] ? unwind_next_frame+0x8f/0x2550 [ 676.934862][ T37] ? __pfx___schedule+0x10/0x10 [ 676.934897][ T37] rt_mutex_schedule+0x76/0xf0 [ 676.934920][ T37] rt_mutex_slowlock_block+0x55c/0x680 [ 676.934964][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 676.934995][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 676.935025][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 676.935065][ T37] ? nfsd_nl_listener_set_doit+0x136/0x16e0 [ 676.935097][ T37] ? nfsd_nl_listener_set_doit+0x136/0x16e0 [ 676.935129][ T37] ? nfsd_nl_listener_set_doit+0x136/0x16e0 [ 676.935154][ T37] mutex_lock_nested+0x168/0x1d0 [ 676.935188][ T37] nfsd_nl_listener_set_doit+0x136/0x16e0 [ 676.935214][ T37] ? __pfx___nla_validate_parse+0x10/0x10 [ 676.935258][ T37] ? rcu_is_watching+0x15/0xb0 [ 676.935285][ T37] ? trace_kmalloc+0x2a/0xf0 [ 676.935305][ T37] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 676.935332][ T37] ? __kmalloc_noprof+0x43b/0x780 [ 676.935356][ T37] ? __nla_parse+0x40/0x60 [ 676.948262][ T37] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 676.948295][ T37] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 676.948323][ T37] genl_family_rcv_msg_doit+0x233/0x340 [ 676.948361][ T37] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 676.948404][ T37] ? bpf_lsm_capable+0x9/0x20 [ 676.948425][ T37] ? security_capable+0x7e/0x2c0 [ 676.948458][ T37] genl_rcv_msg+0x614/0x7a0 [ 676.948493][ T37] ? __pfx_genl_rcv_msg+0x10/0x10 [ 676.948521][ T37] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 676.948564][ T37] netlink_rcv_skb+0x226/0x4a0 [ 676.948589][ T37] ? __pfx_genl_rcv_msg+0x10/0x10 [ 676.948619][ T37] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 676.948656][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 676.948679][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 676.948706][ T37] genl_rcv+0x28/0x40 [ 676.948734][ T37] netlink_unicast+0x7f5/0x990 [ 676.948766][ T37] netlink_sendmsg+0x813/0xb40 [ 676.948800][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 676.948827][ T37] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 676.948863][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 676.948886][ T37] sock_sendmsg_nosec+0x13a/0x180 [ 676.948920][ T37] ____sys_sendmsg+0x565/0x870 [ 676.948945][ T37] ? __might_fault+0xaf/0x130 [ 676.948972][ T37] ? __pfx_____sys_sendmsg+0x10/0x10 [ 676.949005][ T37] ? import_iovec+0x73/0xa0 [ 676.949032][ T37] ___sys_sendmsg+0x2a5/0x360 [ 676.949055][ T37] ? __lock_acquire+0x683/0x2ce0 [ 676.949080][ T37] ? __pfx____sys_sendmsg+0x10/0x10 [ 676.949108][ T37] ? futex_wait+0x2a2/0x390 [ 676.949165][ T37] ? __fget_files+0x2a/0x420 [ 676.949185][ T37] ? __fget_files+0x3a8/0x420 [ 676.949215][ T37] __x64_sys_sendmsg+0x1b7/0x290 [ 676.949251][ T37] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 676.949293][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.949314][ T37] do_syscall_64+0x174/0x580 [ 676.949339][ T37] ? trace_irq_disable+0x3b/0x140 [ 676.949359][ T37] ? clear_bhb_loop+0x40/0x90 [ 676.949383][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.949402][ T37] RIP: 0033:0x7fc65a2ede99 [ 676.949420][ T37] RSP: 002b:00007fc658525028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 676.949441][ T37] RAX: ffffffffffffffda RBX: 00007fc65a576090 RCX: 00007fc65a2ede99 [ 676.949456][ T37] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 676.949468][ T37] RBP: 00007fc65a383eaf R08: 0000000000000000 R09: 0000000000000000 [ 676.949481][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.949493][ T37] R13: 00007fc65a576128 R14: 00007fc65a576090 R15: 00007fff3af54938 [ 676.949524][ T37] [ 676.949568][ T37] [ 676.949568][ T37] Showing all locks held in the system: [ 676.949639][ T37] 12 locks held by kworker/u8:0/12: [ 676.949681][ T37] 5 locks held by kworker/u8:1/13: [ 676.949692][ T37] 5 locks held by ksoftirqd/0/15: [ 676.949702][ T37] 4 locks held by pr/legacy/17: [ 676.949714][ T37] 3 locks held by rcuc/0/20: [ 676.949727][ T37] 1 lock held by khungtaskd/37: [ 676.949737][ T37] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 676.949823][ T37] 11 locks held by kworker/u8:2/39: [ 676.949862][ T37] 11 locks held by kworker/u8:11/3025: [ 676.949875][ T37] 3 locks held by kworker/u8:13/3375: [ 676.949886][ T37] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 676.950002][ T37] #1: ffffc9000e99fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 676.950052][ T37] #2: ffffffff8f5b1df8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 676.950156][ T37] 1 lock held by jbd2/sda1-8/4924: [ 676.950167][ T37] 1 lock held by syslogd/4944: [ 676.950178][ T37] #0: ffff888033a91bd8 (&si->socket.wq.wait){+.+.}-{3:3}, at: finish_wait+0xbe/0x1e0 [ 676.950231][ T37] 3 locks held by klogd/4951: [ 676.950250][ T37] 2 locks held by getty/5347: [ 676.950260][ T37] #0: ffff888032a790a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 676.950376][ T37] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 676.950465][ T37] 1 lock held by syz-executor/5581: [ 676.950480][ T37] 6 locks held by kworker/1:6/5728: [ 676.950490][ T37] #0: ffff88801a72d938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 676.950538][ T37] #1: ffffc90004b1fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 676.950587][ T37] #2: ffff88802a32e210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 676.968726][ T37] #3: ffff888079d08210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 676.968884][ T37] #4: ffff8880203d41d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 676.968935][ T37] #5: ffffffff8e0606c0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 676.969025][ T37] 5 locks held by kworker/1:8/6046: [ 676.969036][ T37] #0: ffff88801a72d938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 676.969087][ T37] #1: ffffc9000598fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 676.969135][ T37] #2: ffff88802a1b0210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 676.969181][ T37] #3: ffff88802cbd0210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 676.969225][ T37] #4: ffff88802b0be1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 676.969294][ T37] 3 locks held by syz.4.881/9415: [ 676.969304][ T37] #0: ffff8880408e6f28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 676.969350][ T37] #1: ffff8880374d4500 (sb_writers#16){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 676.969465][ T37] #2: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 676.969521][ T37] 2 locks held by syz.6.1359/10579: [ 676.969532][ T37] #0: ffffffff8f6230a0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 676.969585][ T37] #1: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x136/0x16e0 [ 676.969637][ T37] 2 locks held by syz.6.1359/10581: [ 676.969647][ T37] #0: ffffffff8f6230a0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 676.969698][ T37] #1: ffffffff8e4e9538 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x136/0x16e0 [ 676.969749][ T37] 7 locks held by syz-executor/11012: [ 676.969759][ T37] #0: ffff888035c08500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 676.969810][ T37] #1: ffff88805e865078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 676.969910][ T37] #2: ffff888029206c38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 676.969966][ T37] #3: ffffffff8ee26d18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 676.970038][ T37] #4: ffff88803db0b160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 676.970090][ T37] #5: ffff88803da5e310 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 676.970167][ T37] #6: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 676.970221][ T37] 4 locks held by syz-executor/11123: [ 676.970237][ T37] #0: ffff888035c08500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 676.970289][ T37] #1: ffff88802a6a6878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 676.970340][ T37] #2: ffff888029206c38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 676.970393][ T37] #3: ffffffff8ee26d18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 676.970438][ T37] 4 locks held by syz-executor/11475: [ 676.970448][ T37] #0: ffff888035c08500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 676.970499][ T37] #1: ffff8880300fe078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 676.970549][ T37] #2: ffff888029206c38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 676.970603][ T37] #3: ffffffff8ee26d18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 676.970648][ T37] 4 locks held by syz-executor/11650: [ 676.970658][ T37] #0: ffff888035c08500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 676.991487][ T37] #1: ffff888056f0a478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 676.991543][ T37] #2: ffff888029206c38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 676.991599][ T37] #3: ffffffff8ee26d18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 676.991646][ T37] 5 locks held by syz.9.1827/11888: [ 676.991658][ T37] 4 locks held by syz.5.1829/11896: [ 676.991670][ T37] [ 676.991676][ T37] ============================================= [ 676.991676][ T37] [ 676.991685][ T37] NMI backtrace for cpu 0 [ 676.991699][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 676.991720][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 676.991738][ T37] Call Trace: [ 676.991746][ T37] [ 676.991753][ T37] dump_stack_lvl+0xe8/0x150 [ 676.991784][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 676.991872][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 676.991938][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 676.991998][ T37] sys_info+0x135/0x170 [ 676.992024][ T37] watchdog+0xfd7/0x1030 [ 676.992050][ T37] ? watchdog+0x1c7/0x1030 [ 676.992073][ T37] kthread+0x388/0x470 [ 676.992130][ T37] ? __pfx_watchdog+0x10/0x10 [ 676.992146][ T37] ? __pfx_kthread+0x10/0x10 [ 676.992174][ T37] ret_from_fork+0x514/0xb70 [ 676.992272][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 676.992301][ T37] ? __switch_to+0xc89/0x1420 [ 676.992376][ T37] ? __pfx_kthread+0x10/0x10 [ 676.992406][ T37] ret_from_fork_asm+0x1a/0x30 [ 676.992473][ T37] [ 676.992517][ T37] Sending NMI from CPU 0 to CPUs 1: [ 676.992546][ C1] NMI backtrace for cpu 1 [ 676.992560][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 676.992579][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 676.992590][ C1] RIP: 0010:__schedule+0x14df/0x5500 [ 676.992612][ C1] Code: 42 80 3c 28 00 74 08 4c 89 e7 e8 7c 9c ea f6 49 8b 04 24 65 44 89 38 4c 8d a3 2c 16 00 00 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 <84> c0 0f 85 d0 0a 00 00 4c 8d bb 28 16 00 00 41 0f b6 04 24 3c 02 [ 676.992627][ C1] RSP: 0018:ffffc90000a3fb40 EFLAGS: 00000807 [ 676.992642][ C1] RAX: 0000000000000000 RBX: ffff88805c5a1f00 RCX: dffffc0000000000 [ 676.992655][ C1] RDX: 0000000000000000 RSI: ffffffff8daf5218 RDI: ffff88801d2ec3c0 [ 676.992668][ C1] RBP: ffffc90000a3fd40 R08: ffffffff8faf9737 R09: 1ffffffff1f5f2e6 [ 676.992681][ C1] R10: dffffc0000000000 R11: fffffbfff1f5f2e7 R12: ffff88805c5a352c [ 676.992694][ C1] R13: dffffc0000000000 R14: ffff88801d2ebe00 R15: ffff88805c5a3558 [ 676.992707][ C1] FS: 0000000000000000(0000) GS:ffff888125d41000(0000) knlGS:0000000000000000 [ 676.992722][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 676.992734][ C1] CR2: 00007f4558e17000 CR3: 000000002cbbc000 CR4: 00000000003526f0 [ 676.992750][ C1] Call Trace: [ 676.992756][ C1] [ 676.992769][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 676.992790][ C1] ? sched_clock_cpu+0x74/0x440 [ 676.992816][ C1] ? __pfx___schedule+0x10/0x10 [ 676.992833][ C1] ? schedule+0x90/0x2b0 [ 676.992854][ C1] ? schedule+0x90/0x2b0 [ 676.992874][ C1] schedule+0x164/0x2b0 [ 676.992892][ C1] smpboot_thread_fn+0x5f9/0xa80 [ 676.992983][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 676.993010][ C1] kthread+0x388/0x470 [ 676.993036][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 676.993058][ C1] ? __pfx_kthread+0x10/0x10 [ 676.993084][ C1] ret_from_fork+0x514/0xb70 [ 676.993112][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 676.993138][ C1] ? __switch_to+0xc89/0x1420 [ 676.993162][ C1] ? __pfx_kthread+0x10/0x10 [ 676.993187][ C1] ret_from_fork_asm+0x1a/0x30 [ 676.993212][ C1] [ 677.014789][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 677.014810][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 677.014832][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 677.014844][ T37] Call Trace: [ 677.014851][ T37] [ 677.014859][ T37] vpanic+0x56c/0xa60 [ 677.014882][ T37] ? __pfx___schedule+0x10/0x10 [ 677.014905][ T37] ? __pfx_vpanic+0x10/0x10 [ 677.014932][ T37] panic+0xc5/0xd0 [ 677.014948][ T37] ? __pfx_panic+0x10/0x10 [ 677.014963][ T37] ? preempt_schedule_common+0x82/0xd0 [ 677.014983][ T37] ? preempt_schedule_thunk+0x16/0x40 [ 677.015008][ T37] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 677.015039][ T37] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 677.015072][ T37] watchdog+0x1030/0x1030 [ 677.015100][ T37] ? watchdog+0x1c7/0x1030 [ 677.015125][ T37] kthread+0x388/0x470 [ 677.015155][ T37] ? __pfx_watchdog+0x10/0x10 [ 677.015170][ T37] ? __pfx_kthread+0x10/0x10 [ 677.015199][ T37] ret_from_fork+0x514/0xb70 [ 677.015232][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 677.015262][ T37] ? __switch_to+0xc89/0x1420 [ 677.015290][ T37] ? __pfx_kthread+0x10/0x10 [ 677.015320][ T37] ret_from_fork_asm+0x1a/0x30 [ 677.015354][ T37] [ 677.015654][ T37] Kernel Offset: disabled