last executing test programs: 13.987630758s ago: executing program 2 (id=146): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800b500000000000000160000000020181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 13.930784008s ago: executing program 2 (id=148): socket$nl_generic(0x10, 0x3, 0x10) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x6a, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x1) 7.332836305s ago: executing program 1 (id=193): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x2ff, 0x0, 0x4}]}) 7.293018606s ago: executing program 1 (id=194): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000404b0c00010001000000010902270001010080320904000003ff0000000705830308000a070581022000000705020220"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x0) 6.73650262s ago: executing program 3 (id=197): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xbd}, 'port1\x00', 0x94, 0x11cfa, 0xfffffffd, 0x8000008, 0x3, 0x2, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000700)={0x800100, 0x1080, 0xde, 0x7, 0x3, 0xd3}) close_range(r0, 0xffffffffffffffff, 0x0) 6.654917702s ago: executing program 3 (id=198): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000000)={0x3}) 6.597118104s ago: executing program 3 (id=199): lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pread64(0xffffffffffffffff, &(0x7f0000000700)=""/115, 0x73, 0x5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x8}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0xf1, 0x64, 0x96, 0x40, 0x7c0, 0x158b, 0xd9d2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x40, 0x4, 0xe0, 0x1, "", [{{0x9, 0x4, 0x2c, 0x7, 0x1, 0xa7, 0x3a, 0x30, 0x6, [], [{{0x9, 0x5, 0x83, 0x3, 0x200, 0x39, 0x7, 0x9}}]}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES8=r0, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x1b}, @const={0x739, {0xff, 0x805, 0x2, 0x6}}}) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x40084503, &(0x7f0000ffcffc)) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) syz_open_dev$media(&(0x7f0000000080), 0xfffffffffffffffe, 0x40) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x180001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0x80585414, &(0x7f0000000340)) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 5.380727324s ago: executing program 1 (id=203): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800b50000000000000016000000002018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 5.137963141s ago: executing program 1 (id=205): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x1, 0x8, 0x2, &(0x7f0000000080)={0x9, "7efe711cddad79a8b8935eaefb802b898e1a75b31a1a709cfc0a3c23e83417bcd4"}}) 4.706181772s ago: executing program 4 (id=211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)={@val={0xa, 0x806}, @val={0x0, 0x1, 0x400, 0xffc0, 0x4d8b, 0xb}, @eth={@random="0100000800", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x18, 0x11, 0xff, @private2, @dev={0xfe, 0x80, '\x00', 0x10}, {[], {0x4e23, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x43f4, 0x63}}}}}}}}, 0x5c) 4.579957515s ago: executing program 4 (id=212): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x1b, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0x40, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100005, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x8d, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a0, 0xa9, 0xff, 0xfffffffe, 0x2, 0x2, 0x2, 0x102, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x1, 0x4], [0x9, 0x3, 0x2, 0x9, 0x4, 0x18000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x6, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x7, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x5, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x6, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x4643, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.95555405s ago: executing program 3 (id=213): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @private=0xa010100}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.845742248s ago: executing program 3 (id=217): socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="365e4e92c32ad880a6d33aaad447788d30188897", 0x14}], 0x1}, 0x40000) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x102) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 2.76900614s ago: executing program 4 (id=218): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0x2020) 2.716930272s ago: executing program 1 (id=220): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) 2.486387017s ago: executing program 0 (id=222): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x1, @pix={0x68000000, 0x4, 0x30313953, 0x8, 0x1, 0x2aa, 0xc, 0x3db, 0x1, 0x8, 0x1, 0x1}}) 2.485431467s ago: executing program 4 (id=223): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mount(0x0, 0x0, &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.316769652s ago: executing program 0 (id=224): connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3, 0x80000002, 0x2, 0x8000000000000000, 0xc}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r3}, &(0x7f00000000c0)=""/61, 0xfffffffffffffd7e, 0x0) 2.292721612s ago: executing program 2 (id=225): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000006c0)=0xffffffffffffffff, 0x4) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x324}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4004015) 2.235079934s ago: executing program 3 (id=226): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff00000007058102"], 0x0) 2.080712978s ago: executing program 2 (id=227): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setreuid(0xee01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "121008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_request={0x80, 0x0, 0x0, 0xfffc}}}}}}, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="1fe1bc7f", 0x4) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4000080) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9e00", 0x1c, 0x6, 0xfde3996dcd16970f, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[@fragment={0xd7, 0x0, 0x9, 0x0, 0x0, 0x8, 0x68}], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xfffd, 0x0, 0x3}}}}}}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) 2.002156249s ago: executing program 1 (id=228): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904"], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x20000810) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000090}]}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 1.426132694s ago: executing program 0 (id=229): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800b50000000000000016000000002018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.112104622s ago: executing program 0 (id=230): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x1b, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0x40, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100005, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x8d, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a0, 0xa9, 0xff, 0xfffffffe, 0x2, 0x2, 0x2, 0x102, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x1, 0x4], [0x9, 0x3, 0x2, 0x9, 0x4, 0x18000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x6, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x7, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x5, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x6, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x4643, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.111121892s ago: executing program 2 (id=231): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xbd}, 'port1\x00', 0x94, 0x11cfa, 0xfffffffd, 0x8000008, 0x3, 0x2, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffff7, 0x6, 0xe1da, 0x4, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.012867654s ago: executing program 4 (id=232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'lc\x00', 0x35, 0x10000004, 0xa}, 0x2c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="58000000100003050000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800e00010069703665727370616e00000014"], 0x58}, 0x1, 0x0, 0x0, 0x4040880}, 0x0) 951.737306ms ago: executing program 2 (id=233): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x200) 360.738591ms ago: executing program 0 (id=234): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000300)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0x2020) 89.753568ms ago: executing program 4 (id=235): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x40, 0xf, 0x2, "eb67"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x40, 0x12}, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0xe0, 0x40}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0xe}, 0x0, &(0x7f0000000580)={0x40, 0xb, 0x2, '9%'}, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "f804"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 0s ago: executing program 0 (id=236): socket$nl_generic(0x10, 0x3, 0x10) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x6a, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.68' (ED25519) to the list of known hosts. [ 64.107895][ T4173] cgroup: Unknown subsys name 'net' [ 64.275476][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.562541][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 67.384739][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 67.465432][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 67.502398][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 67.546979][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.554641][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.563427][ T4187] device bridge_slave_0 entered promiscuous mode [ 67.575342][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.582544][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.591119][ T4187] device bridge_slave_1 entered promiscuous mode [ 67.618570][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 67.654068][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 67.665981][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.695221][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.702474][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.710786][ T4188] device bridge_slave_0 entered promiscuous mode [ 67.724691][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.731945][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.740198][ T4188] device bridge_slave_1 entered promiscuous mode [ 67.752427][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.798768][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.806133][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.814555][ T4186] device bridge_slave_0 entered promiscuous mode [ 67.826847][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.851642][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.858731][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.867166][ T4186] device bridge_slave_1 entered promiscuous mode [ 67.878582][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.898125][ T4187] team0: Port device team_slave_0 added [ 67.932051][ T4187] team0: Port device team_slave_1 added [ 67.948216][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.978662][ T4188] team0: Port device team_slave_0 added [ 67.986694][ T4188] team0: Port device team_slave_1 added [ 67.994084][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.003521][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.010910][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.018590][ T4196] device bridge_slave_0 entered promiscuous mode [ 68.033218][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.040386][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.048493][ T4196] device bridge_slave_1 entered promiscuous mode [ 68.074436][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.081845][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.108282][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.127539][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.134677][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.161044][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.172414][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.179546][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.188290][ T4195] device bridge_slave_0 entered promiscuous mode [ 68.209876][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.216952][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.243001][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.272807][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.280157][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.288139][ T4195] device bridge_slave_1 entered promiscuous mode [ 68.297989][ T4186] team0: Port device team_slave_0 added [ 68.304473][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.311772][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.337867][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.350972][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.370277][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.394633][ T4186] team0: Port device team_slave_1 added [ 68.412695][ T4187] device hsr_slave_0 entered promiscuous mode [ 68.419603][ T4187] device hsr_slave_1 entered promiscuous mode [ 68.454599][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.466236][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.477921][ T4196] team0: Port device team_slave_0 added [ 68.503965][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.510993][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.537253][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.556584][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.563695][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.589958][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.602843][ T4196] team0: Port device team_slave_1 added [ 68.631777][ T4195] team0: Port device team_slave_0 added [ 68.664320][ T4188] device hsr_slave_0 entered promiscuous mode [ 68.671583][ T4188] device hsr_slave_1 entered promiscuous mode [ 68.678164][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.686289][ T4188] Cannot create hsr debugfs directory [ 68.693359][ T4195] team0: Port device team_slave_1 added [ 68.708232][ T4186] device hsr_slave_0 entered promiscuous mode [ 68.715294][ T4186] device hsr_slave_1 entered promiscuous mode [ 68.722661][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.730625][ T4186] Cannot create hsr debugfs directory [ 68.758243][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.765569][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.791669][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.805071][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.812333][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.838350][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.868141][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.875238][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.901716][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.940071][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.948062][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.974672][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.033632][ T4196] device hsr_slave_0 entered promiscuous mode [ 69.040876][ T4196] device hsr_slave_1 entered promiscuous mode [ 69.047519][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.055821][ T4196] Cannot create hsr debugfs directory [ 69.121110][ T4191] Bluetooth: hci2: command 0x0409 tx timeout [ 69.127923][ T4191] Bluetooth: hci0: command 0x0409 tx timeout [ 69.128010][ T2239] Bluetooth: hci4: command 0x0409 tx timeout [ 69.165937][ T2239] Bluetooth: hci3: command 0x0409 tx timeout [ 69.172456][ T2239] Bluetooth: hci1: command 0x0409 tx timeout [ 69.190147][ T4195] device hsr_slave_0 entered promiscuous mode [ 69.197481][ T4195] device hsr_slave_1 entered promiscuous mode [ 69.205352][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.213012][ T4195] Cannot create hsr debugfs directory [ 69.375176][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.385673][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.406096][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.416919][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.462661][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.472531][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.482560][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.499474][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.571389][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.594687][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.626732][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.637616][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.667789][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.678992][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.691049][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.706756][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.723159][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.764244][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.777233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.787570][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.819360][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.829345][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.839181][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.846461][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.855623][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.888711][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.899129][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.908059][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.915181][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.925034][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.935231][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.945968][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.954979][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.972350][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.992440][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.031963][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.040003][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.047789][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.057161][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.066352][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.075226][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.086415][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.124105][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.133383][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.142938][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.150079][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.158419][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.167618][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.176903][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.189247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.198386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.207223][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.214446][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.228987][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.248377][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.257812][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.292856][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.300031][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.308866][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.317831][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.331174][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.359441][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.374524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.385410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.398436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.408392][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.417700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.432958][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.455156][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.469418][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.479670][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.491760][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.501582][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.510756][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.519065][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.527935][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.537854][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.545155][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.557759][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.576731][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.590369][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.598625][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.607290][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.616249][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.625841][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.635116][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.642338][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.650519][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.662643][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.693297][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.710614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.719341][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.726663][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.737328][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.745139][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.753000][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.762179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.770822][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.777982][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.786894][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.808500][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.820446][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.829424][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.846507][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.856629][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.869984][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.900922][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.915257][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.925576][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.934439][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.944812][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.953340][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.962827][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.972684][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.981930][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.990900][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.999772][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.008199][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.018931][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.027818][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.034947][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.043533][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.052428][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.061190][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.068331][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.080943][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.089014][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.097338][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.122715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.132919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.142106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.152906][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.169436][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.183175][ T1350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.191314][ T1350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.198863][ T1350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.208026][ T1350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.210118][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 71.217751][ T1350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.228054][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 71.240516][ T4234] Bluetooth: hci4: command 0x041b tx timeout [ 71.250211][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.259073][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 71.273326][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.287256][ T4234] Bluetooth: hci2: command 0x041b tx timeout [ 71.295595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.308410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.317133][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.328732][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.338422][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.352077][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.365756][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.391198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.405190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.428270][ T4195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.446930][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.471168][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.480466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.494844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.504924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.518190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.527793][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.538267][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.546675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.555341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.577199][ T4187] device veth0_vlan entered promiscuous mode [ 71.596349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.622276][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.662053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.669593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.691562][ T4187] device veth1_vlan entered promiscuous mode [ 71.714174][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.730593][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.749279][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.767154][ T4188] device veth0_vlan entered promiscuous mode [ 71.777563][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.787196][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.815506][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.828052][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.853230][ T4188] device veth1_vlan entered promiscuous mode [ 71.874314][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.887373][ T1350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.897709][ T1350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.908516][ T1350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.937989][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.948069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.956550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.966336][ T4187] device veth0_macvtap entered promiscuous mode [ 71.978056][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.004039][ T1350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.013313][ T1350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.023779][ T1350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.040477][ T4187] device veth1_macvtap entered promiscuous mode [ 72.076403][ T4188] device veth0_macvtap entered promiscuous mode [ 72.091214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.105097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.114565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.124024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.133564][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.143373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.166778][ T4188] device veth1_macvtap entered promiscuous mode [ 72.176015][ T1350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.185166][ T1350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.194550][ T1350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.203367][ T1350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.213468][ T1350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.228020][ T4196] device veth0_vlan entered promiscuous mode [ 72.247243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.257341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.266160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.274614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.284374][ T4195] device veth0_vlan entered promiscuous mode [ 72.295768][ T4196] device veth1_vlan entered promiscuous mode [ 72.307390][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.319064][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.334372][ T4195] device veth1_vlan entered promiscuous mode [ 72.343631][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.355110][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.367005][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.376188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.385262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.393933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.403016][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.415438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.424375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.433322][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.444979][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.470026][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.479382][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.488823][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.499635][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.519040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.528776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.537232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.546754][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.575685][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.586648][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.598550][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.609459][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.618845][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.628037][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.636833][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.651895][ T1350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.660742][ T1350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.669212][ T1350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.678345][ T1350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.693502][ T1350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.701511][ T1350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.711653][ T4186] device veth0_vlan entered promiscuous mode [ 72.727618][ T1350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.737435][ T1350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.771468][ T4195] device veth0_macvtap entered promiscuous mode [ 72.812162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.828356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.837444][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.850536][ T4195] device veth1_macvtap entered promiscuous mode [ 72.863733][ T4186] device veth1_vlan entered promiscuous mode [ 72.895009][ T4196] device veth0_macvtap entered promiscuous mode [ 72.948013][ T4196] device veth1_macvtap entered promiscuous mode [ 72.967670][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.971364][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.978061][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.989447][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.006231][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.017432][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.028563][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.048396][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.062914][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.073120][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.083920][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.094096][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.104958][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.116457][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.128015][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.137179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.145875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.155340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.163953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.172800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.180961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.190220][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.198966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.208003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.223208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.232825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.243430][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.254065][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.264295][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.275041][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.287703][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.290661][ T4262] Bluetooth: hci4: command 0x040f tx timeout [ 73.309901][ T4262] Bluetooth: hci3: command 0x040f tx timeout [ 73.315576][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.327778][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.342671][ T4262] Bluetooth: hci1: command 0x040f tx timeout [ 73.343435][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.361666][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.366664][ T4262] Bluetooth: hci2: command 0x040f tx timeout [ 73.371647][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.378407][ T4262] Bluetooth: hci0: command 0x040f tx timeout [ 73.388362][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.391338][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.414523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.424319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.433371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.442816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.463845][ T4186] device veth0_macvtap entered promiscuous mode [ 73.477205][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.486580][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.496744][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.505849][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.521496][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.531035][ T1350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.532267][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.538855][ T1350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.547618][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.564285][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.606920][ T4186] device veth1_macvtap entered promiscuous mode [ 73.614371][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.623820][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.633659][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.660276][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.665284][ T1350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.668345][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.676709][ T1350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.713217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.723407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.774743][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.813633][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.825343][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.841923][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.857872][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.869396][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.879822][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.890623][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.903079][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.940062][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.949015][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.971882][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.996053][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.008460][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.019068][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.028959][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.039670][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.051133][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.062466][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.074235][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.148603][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.166885][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.169123][ T4268] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.183042][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.205371][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.214683][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.224321][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.249513][ T373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.258689][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 74.265456][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.276521][ T373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.291134][ T373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.298991][ T373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.310379][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.326313][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.347792][ T1108] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.417247][ T373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.445387][ T373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.459040][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.471593][ T373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.479484][ T373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.489434][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.561283][ T4253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.569490][ T4253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.608676][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.708809][ T373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.722209][ T1108] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 74.747473][ T373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.759057][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.775878][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.806019][ T1108] usb 1-1: config 0 descriptor?? [ 74.854849][ T1108] cp210x 1-1:0.0: cp210x converter detected [ 75.019836][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 75.240240][ T4231] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.285628][ T4191] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.293739][ T1108] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 75.340979][ T1108] cp210x 1-1:0.0: GPIO initialisation failed: -524 [ 75.363023][ T1108] usb 1-1: cp210x converter now attached to ttyUSB0 [ 75.370196][ T4234] Bluetooth: hci1: command 0x0419 tx timeout [ 75.378476][ T4234] Bluetooth: hci3: command 0x0419 tx timeout [ 75.380325][ T13] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.406476][ T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 75.426668][ T13] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 75.438750][ T13] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.458083][ T13] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 75.461016][ T4230] Bluetooth: hci0: command 0x0419 tx timeout [ 75.467700][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.475886][ T4230] Bluetooth: hci2: command 0x0419 tx timeout [ 75.539966][ T4191] usb 3-1: Using ep0 maxpacket: 32 [ 75.553023][ T4232] usb 1-1: USB disconnect, device number 2 [ 75.566890][ T4232] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 75.588931][ T4232] cp210x 1-1:0.0: device disconnected [ 75.660092][ T4191] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 75.668245][ T4191] usb 3-1: config 0 has no interface number 0 [ 75.676158][ T4191] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 75.689923][ T4191] usb 3-1: config 0 interface 85 has no altsetting 0 [ 75.710143][ T4231] usb 5-1: unable to get BOS descriptor or descriptor too short [ 75.800209][ T4231] usb 5-1: config 3 has an invalid interface number: 90 but max is 0 [ 75.808374][ T4231] usb 5-1: config 3 has no interface number 0 [ 75.815154][ T4231] usb 5-1: config 3 interface 90 has no altsetting 0 [ 75.849986][ T4191] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 75.861072][ T4191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.869077][ T4191] usb 3-1: Product: syz [ 75.873328][ T4191] usb 3-1: Manufacturer: syz [ 75.877928][ T4191] usb 3-1: SerialNumber: syz [ 75.885678][ T4191] usb 3-1: config 0 descriptor?? [ 75.932133][ T4234] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.020020][ T4231] usb 5-1: New USB device found, idVendor=0424, idProduct=ec00, bcdDevice= 4.12 [ 76.029220][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.037610][ T4231] usb 5-1: Product: syz [ 76.041941][ T4231] usb 5-1: Manufacturer: syz [ 76.046937][ T4231] usb 5-1: SerialNumber: syz [ 76.200006][ T13] gud 4-1:1.0: Failed to get properties (error=-71) [ 76.206821][ T13] gud: probe of 4-1:1.0 failed with error -71 [ 76.219944][ T4234] usb 2-1: Using ep0 maxpacket: 16 [ 76.219971][ T13] usb 4-1: USB disconnect, device number 2 [ 76.350120][ T4234] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 76.359100][ T4234] usb 2-1: config 0 has no interface number 0 [ 76.365419][ T4234] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 76.376518][ T4231] smsc95xx v2.0.0 [ 76.380254][ T4231] smsc95xx 5-1:3.90 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 76.390483][ T4234] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 76.401888][ T4231] smsc95xx: probe of 5-1:3.90 failed with error -22 [ 76.411730][ T4231] usb 5-1: USB disconnect, device number 2 [ 76.570013][ T4191] appletouch 3-1:0.85: Geyser mode initialized. [ 76.577756][ T4191] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input5 [ 76.621300][ T4234] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 76.644236][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.658810][ T4234] usb 2-1: Product: syz [ 76.664030][ T4234] usb 2-1: Manufacturer: syz [ 76.668715][ T4234] usb 2-1: SerialNumber: syz [ 76.684701][ T4234] usb 2-1: config 0 descriptor?? [ 76.720444][ T4312] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 76.727867][ T4312] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 76.746356][ T4320] capability: warning: `syz.3.19' uses deprecated v2 capabilities in a way that may be insecure [ 76.788358][ T4231] usb 3-1: USB disconnect, device number 2 [ 76.824053][ T4231] appletouch 3-1:0.85: input: appletouch disconnected [ 76.968829][ T4312] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 77.021968][ T4312] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 77.415620][ T4337] loop3: detected capacity change from 0 to 32768 [ 77.900050][ T4234] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 78.215985][ T4337] XFS (loop3): Mounting V5 Filesystem [ 78.378105][ T4337] XFS (loop3): Ending clean mount [ 78.507417][ T4376] capability: warning: `syz.2.32' uses 32-bit capabilities (legacy support in use) [ 78.597295][ T4195] XFS (loop3): Unmounting Filesystem [ 79.739857][ T4229] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 80.107254][ T4418] Zero length message leads to an empty skb [ 80.300393][ T4234] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 80.330215][ T4233] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.360285][ T4229] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 80.447427][ T4234] asix: probe of 2-1:0.34 failed with error -71 [ 80.630981][ T4229] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0043, bcdDevice= 1.01 [ 80.663420][ T4234] usb 2-1: USB disconnect, device number 2 [ 80.669956][ T4233] usb 1-1: Using ep0 maxpacket: 16 [ 80.699803][ T4229] usb 3-1: New USB device strings: Mfr=2, Product=3, SerialNumber=1 [ 80.766093][ T4229] usb 3-1: Product: syz [ 80.791225][ T4229] usb 3-1: Manufacturer: syz [ 80.814173][ T4229] usb 3-1: SerialNumber: syz [ 80.830257][ T4233] usb 1-1: config index 0 descriptor too short (expected 37359, got 202) [ 80.846507][ T4233] usb 1-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 80.898575][ T4233] usb 1-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 80.913312][ T4233] usb 1-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 80.925520][ T4229] em28xx 3-1:1.0: New device syz syz @ 480 Mbps (0ccd:0043, interface 0, class 0) [ 80.937463][ T4229] em28xx 3-1:1.0: DVB interface 0 found: bulk [ 81.120116][ T4233] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 81.166570][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.195607][ T4233] usb 1-1: Product: syz [ 81.210359][ T4233] usb 1-1: Manufacturer: syz [ 81.378675][ T4233] usb 1-1: SerialNumber: syz [ 81.590277][ T4229] em28xx 3-1:1.0: unknown em28xx chip ID (0) [ 82.030098][ T4233] usb 1-1: 0:2 : does not exist [ 82.138276][ T4233] usb 1-1: USB disconnect, device number 3 [ 82.831341][ T4234] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.914199][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.976933][ T4456] sched: RT throttling activated [ 84.160631][ T4234] usb 4-1: Using ep0 maxpacket: 8 [ 84.376553][ T4234] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 84.396824][ T4234] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 84.450053][ T4229] em28xx 3-1:1.0: reading from i2c device at 0xa0 failed (error=-5) [ 84.460154][ T4234] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 84.470664][ T4229] em28xx 3-1:1.0: board has no eeprom [ 84.476186][ T4234] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.518369][ T4234] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 84.531808][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.591079][ T4229] em28xx 3-1:1.0: Identified as Terratec Cinergy T XS (MT2060) (card=44) [ 84.599776][ T4229] em28xx 3-1:1.0: dvb set to bulk mode. [ 84.614005][ T4229] usb 3-1: USB disconnect, device number 3 [ 84.630425][ T4229] em28xx 3-1:1.0: Disconnecting em28xx [ 84.647891][ T4231] em28xx 3-1:1.0: Binding DVB extension [ 84.655616][ T4231] zl10353_read_register: readreg error (reg=127, ret==-19) [ 84.672267][ T4231] em28xx 3-1:1.0: frontend initialization failed [ 84.682236][ T4231] em28xx 3-1:1.0: Remote control support is not available for this card. [ 84.692011][ T4229] em28xx 3-1:1.0: Closing input extension [ 84.711151][ T4191] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 84.716159][ T4229] em28xx 3-1:1.0: Freeing device [ 84.800046][ T4234] usb 4-1: GET_CAPABILITIES returned 0 [ 84.805832][ T4234] usbtmc 4-1:16.0: can't read capabilities [ 84.880078][ T4231] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 85.006873][ T1108] usb 4-1: USB disconnect, device number 3 [ 85.040036][ T4191] usb 2-1: not running at top speed; connect to a high speed hub [ 85.145390][ T4191] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.166117][ T4191] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice= 1.00 [ 85.185748][ T4191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.242030][ T4191] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 85.306841][ T4231] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 85.326066][ T4231] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.357030][ T4231] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 85.378387][ T4231] usb 5-1: config 1 has no interface number 1 [ 85.389227][ T4231] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 85.409887][ T4231] usb 5-1: config 1 interface 2 altsetting 1 has an invalid endpoint with address 0x74, skipping [ 85.611911][ T4231] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.635234][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.657958][ T4231] usb 5-1: Product: syz [ 85.669920][ T4231] usb 5-1: Manufacturer: syz [ 85.685265][ T4231] usb 5-1: SerialNumber: syz [ 86.179825][ T4232] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 86.320018][ T4231] usb 5-1: MIDIStreaming interface descriptor not found [ 86.351208][ T4231] usb 5-1: USB disconnect, device number 3 [ 87.119932][ T4191] gspca_vc032x: reg_w err -110 [ 87.125325][ T4232] usb 4-1: Using ep0 maxpacket: 32 [ 87.136066][ T4191] vc032x: probe of 2-1:1.0 failed with error -110 [ 87.259915][ T4232] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 87.310767][ T4232] usb 4-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 87.333056][ T4232] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 87.899914][ T4232] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 87.909157][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.980050][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.006643][ T4518] loop2: detected capacity change from 0 to 2048 [ 88.337916][ T4518] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.699881][ T4232] usb 4-1: Product: syz [ 88.704132][ T4232] usb 4-1: Manufacturer: syz [ 88.708749][ T4232] usb 4-1: SerialNumber: syz [ 88.761955][ T4232] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 88.776668][ T4231] usb 2-1: USB disconnect, device number 3 [ 88.780229][ T4232] imon 4-1:155.0: unable to initialize intf0, err -19 [ 88.789285][ T4232] imon:imon_probe: failed to initialize context! [ 88.795728][ T4232] imon 4-1:155.0: unable to register, err -19 [ 88.930069][ T4230] usb 4-1: USB disconnect, device number 4 [ 88.952061][ T4525] process 'syz.0.76' launched './file1' with NULL argv: empty string added [ 89.209878][ T4232] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 89.239879][ T4535] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 89.399848][ T4230] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 89.750724][ T4232] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 89.805779][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.921445][ T4232] usb 3-1: Product: syz [ 89.991250][ T4232] usb 3-1: Manufacturer: syz [ 90.077065][ T4232] usb 3-1: SerialNumber: syz [ 90.810790][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 91.980009][ T4230] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 92.519741][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 92.529759][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 92.542034][ T4230] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 92.559896][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 92.620511][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 92.634156][ T4230] usb 4-1: string descriptor 0 read error: -71 [ 92.821094][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 92.849756][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 92.859739][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 92.869731][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 92.879733][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 92.889727][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 92.899729][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 92.909730][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 92.929755][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 93.017634][ T4230] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 93.026993][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.054390][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 93.059927][ T4230] usb 4-1: can't set config #1, error -71 [ 93.073381][ T4230] usb 4-1: USB disconnect, device number 5 [ 93.169958][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 93.308014][ T4572] loop4: detected capacity change from 0 to 2048 [ 94.725158][ T7] cfg80211: failed to load regulatory.db [ 94.872620][ T4572] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.929971][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 94.961589][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 95.009877][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 95.110035][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 95.159920][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 95.218896][ T4584] jffs2: notice: (4584) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 95.231909][ T4232] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 95.252411][ T4232] lan78xx: probe of 3-1:1.0 failed with error -71 [ 95.303804][ T4232] usb 3-1: USB disconnect, device number 4 [ 96.165148][ T4589] loop1: detected capacity change from 0 to 32768 [ 96.373715][ T26] audit: type=1800 audit(1786119786.029:2): pid=4594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.96" name="zoned" dev="configfs" ino=35228 res=0 errno=0 [ 96.553306][ T26] audit: type=1800 audit(1786119786.029:3): pid=4594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.96" name="memory_backed" dev="configfs" ino=35229 res=0 errno=0 [ 96.590608][ T26] audit: type=1800 audit(1786119786.029:4): pid=4594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.96" name="zone_nr_conv" dev="configfs" ino=35230 res=0 errno=0 [ 96.696113][ T26] audit: type=1800 audit(1786119786.029:5): pid=4594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.96" name="power" dev="configfs" ino=35231 res=0 errno=0 [ 96.737556][ T4589] XFS (loop1): Mounting V5 Filesystem [ 97.137606][ T4232] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.264298][ T4589] XFS (loop1): Ending clean mount [ 97.560993][ T4187] XFS (loop1): Unmounting Filesystem [ 97.969921][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 97.980248][ T4232] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 98.031694][ T4620] loop2: detected capacity change from 0 to 2048 [ 98.096393][ T4620] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.150905][ T4232] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 98.214692][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 98.240247][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 98.336173][ T4232] usb 1-1: Product: syz [ 98.360457][ T7] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 98.410185][ T7] usb 5-1: config 0 has no interface number 0 [ 98.410242][ T4232] usb 1-1: Manufacturer: syz [ 98.425092][ T7] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.569558][ T7] usb 5-1: config 0 interface 85 has no altsetting 0 [ 98.743104][ T4232] input: Samsung SUR40 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input6 [ 98.869225][ T4202] Bluetooth: hci3: ACL packet for unknown connection handle 3439 [ 98.950668][ T7] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 98.973697][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.026038][ T7] usb 5-1: Product: syz [ 99.049926][ T7] usb 5-1: Manufacturer: syz [ 99.129934][ T7] usb 5-1: SerialNumber: syz [ 99.198052][ T7] usb 5-1: config 0 descriptor?? [ 99.576585][ T4232] usb 1-1: USB disconnect, device number 4 [ 99.877971][ T4639] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 99.900377][ T7] appletouch 5-1:0.85: Geyser mode initialized. [ 99.982526][ T7] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input7 [ 100.481050][ C0] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 100.500664][ T7] usb 5-1: USB disconnect, device number 4 [ 100.941697][ T7] appletouch 5-1:0.85: input: appletouch disconnected [ 102.129993][ T4232] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 102.560345][ T4232] usb 3-1: unable to get BOS descriptor or descriptor too short [ 102.690515][ T4232] usb 3-1: config 64 has an invalid interface number: 44 but max is 0 [ 102.811066][ T4232] usb 3-1: config 64 has no interface number 0 [ 102.915827][ T4232] usb 3-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 103.135318][ T4232] usb 3-1: config 64 interface 44 has no altsetting 0 [ 103.168910][ T1108] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.233026][ T1108] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 103.360107][ T4232] usb 3-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 103.395852][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.408081][ T4232] usb 3-1: Product: syz [ 103.747723][ T4657] fido_id[4657]: Failed to read report descriptor at '/sys/devices/virtual/misc/uhid/0000:0000:0000.0001/report_descriptor': No such device [ 103.916668][ T4232] usb 3-1: Manufacturer: syz [ 103.921488][ T4232] usb 3-1: SerialNumber: syz [ 104.201261][ T4202] Bluetooth: hci3: ACL packet for unknown connection handle 3439 [ 104.290549][ T4233] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 104.650922][ T4233] usb 5-1: Using ep0 maxpacket: 32 [ 104.771770][ T4232] iowarrior 3-1:64.44: no interrupt-out endpoint found [ 104.780078][ T4233] usb 5-1: config 4 has an invalid interface number: 53 but max is 0 [ 104.790626][ T4233] usb 5-1: config 4 has no interface number 0 [ 104.797715][ T4233] usb 5-1: config 4 interface 53 altsetting 96 endpoint 0xB has an invalid bInterval 253, changing to 11 [ 104.809627][ T4233] usb 5-1: config 4 interface 53 has no altsetting 0 [ 104.815360][ T4232] usb 3-1: USB disconnect, device number 5 [ 105.618621][ T4695] loop0: detected capacity change from 0 to 32768 [ 105.810453][ T4233] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice=a5.7e [ 105.893649][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.985305][ T4688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.125'. [ 106.060796][ T4233] usb 5-1: Product: syz [ 106.065447][ T4233] usb 5-1: Manufacturer: syz [ 106.139398][ T4233] usb 5-1: SerialNumber: syz [ 106.397126][ T4695] XFS (loop0): Mounting V5 Filesystem [ 106.484351][ T4695] XFS (loop0): Ending clean mount [ 106.541672][ T4233] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 106.565089][ T4233] usb 5-1: USB disconnect, device number 5 [ 106.629851][ T4229] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 106.654227][ T4188] XFS (loop0): Unmounting Filesystem [ 106.899329][ T4718] loop1: detected capacity change from 0 to 2048 [ 106.997495][ T4718] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.070239][ T4229] usb 3-1: unable to get BOS descriptor or descriptor too short [ 107.200395][ T4229] usb 3-1: config 64 has an invalid interface number: 44 but max is 0 [ 107.264799][ T4229] usb 3-1: config 64 has no interface number 0 [ 107.363540][ T4229] usb 3-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 107.548572][ T4229] usb 3-1: config 64 interface 44 has no altsetting 0 [ 107.726616][ T4202] Bluetooth: hci1: ACL packet for unknown connection handle 3439 [ 108.376464][ T4230] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 108.430439][ T4229] usb 3-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 108.459985][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.485713][ T4229] usb 3-1: Product: syz [ 108.491066][ T4229] usb 3-1: Manufacturer: syz [ 108.500030][ T4229] usb 3-1: SerialNumber: syz [ 108.673955][ T4736] device syzkaller0 entered promiscuous mode [ 108.810984][ T4230] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.921118][ T4229] iowarrior 3-1:64.44: no interrupt-out endpoint found [ 108.942887][ T4229] usb 3-1: USB disconnect, device number 6 [ 108.960104][ T4230] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 108.970238][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 108.978251][ T4230] usb 4-1: Product: syz [ 108.982604][ T4230] usb 4-1: Manufacturer: syz [ 109.822352][ T4752] loop0: detected capacity change from 0 to 32768 [ 109.862737][ T4230] usb 4-1: USB disconnect, device number 6 [ 109.909904][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 109.965940][ T4752] XFS (loop0): Mounting V5 Filesystem [ 110.086503][ T4771] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 110.102008][ T4752] XFS (loop0): Ending clean mount [ 110.199803][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 110.297271][ T4188] XFS (loop0): Unmounting Filesystem [ 110.380365][ T4202] Bluetooth: hci3: ACL packet for unknown connection handle 3439 [ 110.939884][ T23] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 111.133631][ T23] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 111.149122][ T4790] device syzkaller0 entered promiscuous mode [ 111.153226][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.164354][ T23] usb 2-1: Product: syz [ 111.168538][ T23] usb 2-1: Manufacturer: syz [ 111.175573][ T23] usb 2-1: SerialNumber: syz [ 111.188968][ T23] usb 2-1: config 0 descriptor?? [ 111.309960][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 111.366895][ T4797] syz.0.152 uses obsolete (PF_INET,SOCK_PACKET) [ 111.559896][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 111.680091][ T7] usb 5-1: config index 0 descriptor too short (expected 37359, got 202) [ 111.689117][ T7] usb 5-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 111.698057][ T7] usb 5-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 111.708669][ T7] usb 5-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 111.769819][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 111.869921][ T7] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.879159][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.887930][ T7] usb 5-1: Product: syz [ 111.892356][ T7] usb 5-1: Manufacturer: syz [ 111.896975][ T7] usb 5-1: SerialNumber: syz [ 112.220036][ T7] usb 5-1: 0:2 : does not exist [ 112.230134][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 112.231231][ T7] usb 5-1: USB disconnect, device number 6 [ 112.279832][ T4548] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 112.349904][ T23] usb 1-1: config 64 has an invalid interface number: 44 but max is 0 [ 112.358285][ T23] usb 1-1: config 64 has no interface number 0 [ 112.364615][ T23] usb 1-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 112.375886][ T23] usb 1-1: config 64 interface 44 has no altsetting 0 [ 112.461729][ T4364] udevd[4364]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.480535][ T7] usb 2-1: USB disconnect, device number 4 [ 112.519855][ T4548] usb 4-1: Using ep0 maxpacket: 16 [ 112.560684][ T23] usb 1-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 112.569957][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.578096][ T23] usb 1-1: Product: syz [ 112.582776][ T23] usb 1-1: Manufacturer: syz [ 112.587387][ T23] usb 1-1: SerialNumber: syz [ 112.640059][ T4548] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 112.811228][ T4548] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 112.824790][ T4548] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.844689][ T4548] usb 4-1: Product: syz [ 112.849149][ T4548] usb 4-1: Manufacturer: syz [ 112.853715][ T4822] device syzkaller0 entered promiscuous mode [ 112.855899][ T4548] usb 4-1: SerialNumber: syz [ 112.872633][ T4548] r8152-cfgselector 4-1: config 0 descriptor?? [ 112.956172][ T23] iowarrior 1-1:64.44: no interrupt-out endpoint found [ 113.001552][ T23] usb 1-1: USB disconnect, device number 5 [ 113.130024][ T4548] r8152-cfgselector 4-1: Unknown version 0x0000 [ 113.150009][ T4548] r8152-cfgselector 4-1: Unknown version 0x0000 [ 113.158438][ T4548] r8152-cfgselector 4-1: USB disconnect, device number 7 [ 113.279943][ T1108] Bluetooth: hci5: command 0x1003 tx timeout [ 113.287269][ T4189] Bluetooth: hci5: sending frame failed (-49) [ 113.379828][ T4233] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 113.916475][ T4853] device syzkaller0 entered promiscuous mode [ 113.964543][ T4233] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 113.984130][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.008322][ T4233] usb 2-1: Product: syz [ 114.015584][ T4233] usb 2-1: Manufacturer: syz [ 114.020016][ T4548] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 114.023619][ T4233] usb 2-1: SerialNumber: syz [ 114.269905][ T4548] usb 4-1: Using ep0 maxpacket: 16 [ 114.389995][ T4548] usb 4-1: config index 0 descriptor too short (expected 37359, got 202) [ 114.404106][ T4548] usb 4-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 114.413157][ T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 114.426524][ T4548] usb 4-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 114.437200][ T4548] usb 4-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 114.540174][ T4233] net_ratelimit: 1 callbacks suppressed [ 114.540210][ T4233] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 114.599909][ T4548] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.608992][ T4548] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.629754][ T4548] usb 4-1: Product: syz [ 114.633953][ T4548] usb 4-1: Manufacturer: syz [ 114.638532][ T4548] usb 4-1: SerialNumber: syz [ 114.829866][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 114.909898][ T7] usb 5-1: config 64 has an invalid interface number: 44 but max is 0 [ 114.918156][ T7] usb 5-1: config 64 has no interface number 0 [ 114.924784][ T7] usb 5-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 114.936436][ T7] usb 5-1: config 64 interface 44 has no altsetting 0 [ 114.980002][ T4548] usb 4-1: 0:2 : does not exist [ 115.009962][ T4548] usb 4-1: USB disconnect, device number 8 [ 115.099967][ T7] usb 5-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 115.109165][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.129951][ T7] usb 5-1: Product: syz [ 115.134167][ T7] usb 5-1: Manufacturer: syz [ 115.140031][ T7] usb 5-1: SerialNumber: syz [ 115.239044][ T4522] udevd[4522]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.359982][ T4548] Bluetooth: hci5: command 0x1001 tx timeout [ 115.366742][ T4189] Bluetooth: hci5: sending frame failed (-49) [ 115.475163][ T4883] loop0: detected capacity change from 0 to 2048 [ 115.602704][ T4883] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.617268][ T7] iowarrior 5-1:64.44: no interrupt-out endpoint found [ 115.796811][ T7] usb 5-1: USB disconnect, device number 7 [ 115.959898][ T4233] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 116.259134][ T4885] device syzkaller0 entered promiscuous mode [ 116.265649][ T4233] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 116.314807][ T4233] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 116.362777][ T4233] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 116.392545][ T4233] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 116.420052][ T4233] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 116.470030][ T4233] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 116.519953][ T4233] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 116.559952][ T4233] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 116.599951][ T4233] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 116.619570][ T4233] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 116.628554][ T4233] lan78xx: probe of 2-1:1.0 failed with error -71 [ 116.649017][ T4233] usb 2-1: USB disconnect, device number 5 [ 116.655123][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 117.053751][ T23] usb 1-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xAA, skipping [ 117.064617][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 117.199987][ T4232] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 117.229912][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 117.239107][ T23] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 117.247641][ T23] usb 1-1: Product: syz [ 117.252036][ T23] usb 1-1: Manufacturer: syz [ 117.256674][ T23] usb 1-1: SerialNumber: syz [ 117.262952][ T23] usb 1-1: config 0 descriptor?? [ 117.318700][ T23] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 117.359622][ T4364] udevd[4364]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.439863][ T1108] Bluetooth: hci5: command 0x1009 tx timeout [ 117.506555][ T23] usb 1-1: USB disconnect, device number 6 [ 117.575754][ T4232] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 117.592795][ T4232] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 32 [ 117.607205][ T4232] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 117.630462][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.670354][ T4903] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 117.678198][ T4903] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 117.690924][ T4232] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 117.705928][ T4232] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 117.889789][ T4233] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 117.923276][ T23] usb 2-1: USB disconnect, device number 6 [ 117.950195][ T23] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 117.970017][ T23] cyberjack 2-1:1.0: device disconnected [ 118.281891][ T4920] loop4: detected capacity change from 0 to 2048 [ 118.345824][ T4920] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.359887][ T4233] usb 4-1: unable to get BOS descriptor or descriptor too short [ 119.089859][ T4233] usb 4-1: config 64 has an invalid interface number: 44 but max is 0 [ 119.098076][ T4233] usb 4-1: config 64 has no interface number 0 [ 119.104695][ T4233] usb 4-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 119.116485][ T4233] usb 4-1: config 64 interface 44 has no altsetting 0 [ 119.152484][ T4930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 119.290031][ T4233] usb 4-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 119.319746][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.334965][ T4233] usb 4-1: Product: syz [ 119.339598][ T4233] usb 4-1: Manufacturer: syz [ 119.344656][ T4233] usb 4-1: SerialNumber: syz [ 119.417161][ T4942] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 119.432388][ T4942] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 119.515865][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 119.980750][ T4233] iowarrior 4-1:64.44: no interrupt-out endpoint found [ 120.010820][ T4233] usb 4-1: USB disconnect, device number 9 [ 120.029796][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 120.169901][ T23] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 120.256214][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.269562][ T23] usb 2-1: config 0 descriptor?? [ 120.504281][ T4958] loop0: detected capacity change from 0 to 2048 [ 120.533936][ T4958] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.720006][ T23] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 121.256706][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 121.291195][ T23] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 121.298878][ T23] usb 2-1: media controller created [ 121.318038][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.359987][ T23] az6027: usb out operation failed. (-71) [ 121.379910][ T23] az6027: usb out operation failed. (-71) [ 121.385779][ T23] stb0899_attach: Driver disabled by Kconfig [ 121.392575][ T23] az6027: no front-end attached [ 121.392575][ T23] [ 121.429911][ T23] az6027: usb out operation failed. (-71) [ 121.435739][ T23] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 121.454651][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 121.472242][ T23] dvb-usb: schedule remote query interval to 400 msecs. [ 121.484887][ T23] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 121.507278][ T23] usb 2-1: USB disconnect, device number 7 [ 121.547928][ T4966] binder: BINDER_SET_CONTEXT_MGR already set [ 121.589943][ T4966] binder: 4965:4966 ioctl 4018620d 200000000300 returned -16 [ 121.645505][ T4973] overlayfs: workdir and upperdir must reside under the same mount [ 121.682377][ T23] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 121.696115][ T4964] device syzkaller0 entered promiscuous mode [ 122.300051][ T4232] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 122.491293][ T4994] loop2: detected capacity change from 0 to 2048 [ 122.531901][ T4994] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.710448][ T1108] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 122.830358][ T4232] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.893464][ T4232] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.909780][ T4232] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 122.923103][ T4232] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.080143][ T1108] usb 2-1: Using ep0 maxpacket: 16 [ 123.120702][ T4232] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 123.148654][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.332948][ T1108] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.343659][ T1108] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 123.353627][ T4232] usb 4-1: Product: syz [ 123.359604][ T4232] usb 4-1: Manufacturer: syz [ 123.364601][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.373079][ T4232] usb 4-1: SerialNumber: syz [ 123.399865][ T1108] usb 2-1: config 0 descriptor?? [ 123.467231][ T5009] netlink: 56 bytes leftover after parsing attributes in process `syz.4.232'. [ 124.341513][ T4230] usb 4-1: USB disconnect, device number 10 [ 124.371508][ T4233] usb 2-1: USB disconnect, device number 8 [ 124.397870][ T4202] Bluetooth: hci0: Unknown advertising packet type: 0x90 [ 124.398169][ T4202] ================================================================== [ 124.413609][ T4202] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x1275/0x3ca0 [ 124.421456][ T4202] Read of size 2 at addr ffff8880247bcc00 by task kworker/u5:6/4202 [ 124.429450][ T4202] [ 124.431823][ T4202] CPU: 0 PID: 4202 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 124.439379][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.449494][ T4202] Workqueue: hci0 hci_rx_work [ 124.449821][ T4229] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 124.454270][ T4202] Call Trace: [ 124.454326][ T4202] [ 124.467971][ T4202] dump_stack_lvl+0x188/0x250 [ 124.472684][ T4202] ? show_regs_print_info+0x20/0x20 [ 124.477901][ T4202] ? load_image+0x410/0x410 [ 124.482415][ T4202] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 124.487905][ T4202] print_address_description+0x60/0x2d0 [ 124.493466][ T4202] ? hci_le_meta_evt+0x1275/0x3ca0 [ 124.498596][ T4202] kasan_report+0xdf/0x130 [ 124.503034][ T4202] ? hci_le_meta_evt+0x1275/0x3ca0 [ 124.508178][ T4202] hci_le_meta_evt+0x1275/0x3ca0 [ 124.513186][ T4202] ? hci_event_packet+0x363/0x1310 [ 124.518324][ T4202] ? __lock_acquire+0x7b50/0x7b50 [ 124.523376][ T4202] ? hci_remote_host_features_evt+0x240/0x240 [ 124.529458][ T4202] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 124.535120][ T4202] ? mark_lock+0x94/0x320 [ 124.539468][ T4202] ? mutex_unlock+0x10/0x10 [ 124.543984][ T4202] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.549983][ T4202] ? lock_chain_count+0x20/0x20 [ 124.554857][ T4202] ? __rwlock_init+0x140/0x140 [ 124.559639][ T4202] hci_event_packet+0xe0b/0x1310 [ 124.564602][ T4202] ? _raw_spin_unlock+0x40/0x40 [ 124.569479][ T4202] ? rcu_lock_release+0x20/0x20 [ 124.574352][ T4202] ? hci_send_to_monitor+0x9c/0x4a0 [ 124.579596][ T4202] hci_rx_work+0x255/0xa10 [ 124.584045][ T4202] process_one_work+0x867/0xff0 [ 124.588940][ T4202] ? worker_detach_from_pool+0x240/0x240 [ 124.594589][ T4202] ? lockdep_hardirqs_off+0x70/0x100 [ 124.599895][ T4202] ? _raw_spin_lock_irq+0xb7/0xf0 [ 124.604934][ T4202] ? _raw_spin_lock_irqsave+0x100/0x100 [ 124.610500][ T4202] ? wq_worker_running+0x97/0x170 [ 124.615543][ T4202] worker_thread+0xad7/0x12a0 [ 124.620263][ T4202] kthread+0x42e/0x520 [ 124.624347][ T4202] ? rcu_lock_release+0x20/0x20 [ 124.629211][ T4202] ? kthread_blkcg+0xd0/0xd0 [ 124.633819][ T4202] ret_from_fork+0x1f/0x30 [ 124.638264][ T4202] [ 124.641301][ T4202] [ 124.643627][ T4202] Allocated by task 4993: [ 124.647973][ T4202] __kasan_kmalloc+0xaf/0xe0 [ 124.652583][ T4202] __alloc_skb+0x22c/0x750 [ 124.657013][ T4202] vhci_write+0xbd/0x440 [ 124.661271][ T4202] vfs_write+0x748/0xd70 [ 124.665525][ T4202] ksys_write+0x153/0x260 [ 124.669869][ T4202] do_syscall_64+0x4c/0xa0 [ 124.674293][ T4202] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.680196][ T4202] [ 124.682522][ T4202] The buggy address belongs to the object at ffff8880247bc800 [ 124.682522][ T4202] which belongs to the cache kmalloc-1k of size 1024 [ 124.696600][ T4202] The buggy address is located 0 bytes to the right of [ 124.696600][ T4202] 1024-byte region [ffff8880247bc800, ffff8880247bcc00) [ 124.710335][ T4202] The buggy address belongs to the page: [ 124.710937][ T4229] usb 5-1: Using ep0 maxpacket: 16 [ 124.716000][ T4202] page:ffffea000091ee00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x247b8 [ 124.731354][ T4202] head:ffffea000091ee00 order:3 compound_mapcount:0 compound_pincount:0 [ 124.739698][ T4202] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 124.747704][ T4202] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888016c41dc0 [ 124.756299][ T4202] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 124.764890][ T4202] page dumped because: kasan: bad access detected [ 124.771372][ T4202] page_owner tracks the page as allocated [ 124.777098][ T4202] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4036, ts 56829409338, free_ts 56826283514 [ 124.796215][ T4202] get_page_from_freelist+0x24f6/0x2670 [ 124.802017][ T4202] __alloc_pages+0x1ee/0x480 [ 124.803225][ T4264] Bluetooth: Error in BCSP hdr checksum [ 124.806663][ T4202] new_slab+0xc0/0x4b0 [ 124.806745][ T4202] ___slab_alloc+0x807/0xdd0 [ 124.806796][ T4202] __kmalloc_node_track_caller+0x13d/0x3a0 [ 124.806825][ T4202] __alloc_skb+0x22c/0x750 [ 124.806841][ T4202] sk_stream_alloc_skb+0x204/0xb50 [ 124.806856][ T4202] tcp_sendmsg_locked+0xcbb/0x3330 [ 124.841871][ T4202] tcp_sendmsg+0x2b/0x40 [ 124.846226][ T4202] sock_write_iter+0x2a6/0x3a0 [ 124.851015][ T4202] vfs_write+0x748/0xd70 [ 124.851532][ T4229] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 124.855276][ T4202] ksys_write+0x153/0x260 [ 124.855299][ T4202] do_syscall_64+0x4c/0xa0 [ 124.855315][ T4202] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.855334][ T4202] page last free stack trace: [ 124.855340][ T4202] free_unref_page_prepare+0x637/0x6c0 [ 124.855357][ T4202] free_unref_page+0x8f/0x2a0 [ 124.855373][ T4202] skb_release_data+0x35c/0x830 [ 124.900200][ T4202] __kfree_skb+0x4c/0x60 [ 124.904464][ T4202] tcp_recvmsg_locked+0x143d/0x2690 [ 124.909771][ T4202] tcp_recvmsg+0x22a/0x760 [ 124.914236][ T4202] inet_recvmsg+0x146/0x200 [ 124.918758][ T4202] sock_read_iter+0x2c2/0x380 [ 124.923456][ T4202] vfs_read+0x75e/0xd50 [ 124.927683][ T4202] ksys_read+0x153/0x260 [ 124.932226][ T4202] do_syscall_64+0x4c/0xa0 [ 124.936716][ T4202] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.942633][ T4202] [ 124.944965][ T4202] Memory state around the buggy address: [ 124.950708][ T4202] ffff8880247bcb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 124.958782][ T4202] ffff8880247bcb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 124.966863][ T4202] >ffff8880247bcc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 124.974934][ T4202] ^ [ 124.979015][ T4202] ffff8880247bcc80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 124.987095][ T4202] ffff8880247bcd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 124.995261][ T4202] ================================================================== [ 125.003333][ T4202] Disabling lock debugging due to kernel taint [ 125.013292][ T4202] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 125.020501][ T4202] CPU: 0 PID: 4202 Comm: kworker/u5:6 Tainted: G B syzkaller #0 [ 125.029518][ T4202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.039710][ T4202] Workqueue: hci0 hci_rx_work [ 125.044406][ T4202] Call Trace: [ 125.047704][ T4202] [ 125.050653][ T4202] dump_stack_lvl+0x188/0x250 [ 125.055444][ T4202] ? show_regs_print_info+0x20/0x20 [ 125.060690][ T4202] ? load_image+0x410/0x410 [ 125.065214][ T4202] panic+0x2f8/0x850 [ 125.069120][ T4202] ? bpf_jit_dump+0xd0/0xd0 [ 125.070540][ T154] Bluetooth: Error in BCSP hdr checksum [ 125.073717][ T4202] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 125.085208][ T4202] ? _raw_spin_unlock+0x40/0x40 [ 125.089989][ T4229] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 125.090066][ T4202] ? hci_le_meta_evt+0x1275/0x3ca0 [ 125.104167][ T4202] check_panic_on_warn+0x80/0xa0 [ 125.104949][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.109121][ T4202] ? hci_le_meta_evt+0x1275/0x3ca0 [ 125.109151][ T4202] end_report+0x6d/0xf0 [ 125.126412][ T4202] kasan_report+0x102/0x130 [ 125.131112][ T4202] ? hci_le_meta_evt+0x1275/0x3ca0 [ 125.133186][ T4229] usb 5-1: Product: syz [ 125.136329][ T4202] hci_le_meta_evt+0x1275/0x3ca0 [ 125.136357][ T4202] ? hci_event_packet+0x363/0x1310 [ 125.150624][ T4202] ? __lock_acquire+0x7b50/0x7b50 [ 125.151083][ T4229] usb 5-1: Manufacturer: syz [ 125.155689][ T4202] ? hci_remote_host_features_evt+0x240/0x240 [ 125.155720][ T4202] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 125.172010][ T4202] ? mark_lock+0x94/0x320 [ 125.172369][ T4229] usb 5-1: SerialNumber: syz [ 125.176357][ T4202] ? mutex_unlock+0x10/0x10 [ 125.176381][ T4202] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 125.176401][ T4202] ? lock_chain_count+0x20/0x20 [ 125.176418][ T4202] ? __rwlock_init+0x140/0x140 [ 125.201408][ T4202] hci_event_packet+0xe0b/0x1310 [ 125.205504][ T4229] usb 5-1: config 0 descriptor?? [ 125.206491][ T4202] ? _raw_spin_unlock+0x40/0x40 [ 125.216274][ T4202] ? rcu_lock_release+0x20/0x20 [ 125.221146][ T4202] ? hci_send_to_monitor+0x9c/0x4a0 [ 125.226372][ T4202] hci_rx_work+0x255/0xa10 [ 125.230816][ T4202] process_one_work+0x867/0xff0 [ 125.235685][ T4202] ? worker_detach_from_pool+0x240/0x240 [ 125.241332][ T4202] ? lockdep_hardirqs_off+0x70/0x100 [ 125.246733][ T4202] ? _raw_spin_lock_irq+0xb7/0xf0 [ 125.252087][ T4202] ? _raw_spin_lock_irqsave+0x100/0x100 [ 125.258075][ T4202] ? wq_worker_running+0x97/0x170 [ 125.263283][ T4202] worker_thread+0xad7/0x12a0 [ 125.268077][ T4202] kthread+0x42e/0x520 [ 125.272167][ T4202] ? rcu_lock_release+0x20/0x20 [ 125.277031][ T4202] ? kthread_blkcg+0xd0/0xd0 [ 125.281726][ T4202] ret_from_fork+0x1f/0x30 [ 125.286171][ T4202] [ 125.291527][ T4202] Kernel Offset: disabled [ 125.296047][ T4202] Rebooting in 86400 seconds..