last executing test programs: 15m40.360665476s ago: executing program 2 (id=2077): syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x14, 0xfb, 0x66, 0x10, 0x61d, 0xc170, 0x855, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xbe, 0x71, 0x9c, 0x0, [], [{{0x9, 0x5, 0x4, 0x13}}]}}]}}]}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) dup2(r1, r2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000002240)=@updpolicy={0xb8, 0x19, 0x0, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}}}, 0xb8}}, 0x0) write$cgroup_subtree(r3, &(0x7f00000009c0)=ANY=[], 0xda00) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6}]}}}]}, 0x4c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x2) 15m38.6638032s ago: executing program 2 (id=2084): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r3, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r3, r1) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x2c, 0x0, 0x801, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "7cad6d5352"}]}]}, 0x2c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15m37.324017351s ago: executing program 2 (id=2088): unshare(0x20000400) r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e2a, 0x0, @private1}, 0x1c) fanotify_init(0x200, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) r4 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 15m36.415992826s ago: executing program 2 (id=2093): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x9, 0x3, 0x0, 0x6, 0xfffffefa, 0x22}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xe61c6a5c983a3b82}]}}}]}, 0x58}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0xffffffff, 0x0, 0x3, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 15m10.540472188s ago: executing program 2 (id=2095): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 15m9.498720241s ago: executing program 2 (id=2120): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) 13.439250925s ago: executing program 0 (id=3921): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 10.404482951s ago: executing program 0 (id=3919): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) socket$inet6(0xa, 0x80002, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}]}, 0x1c}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r4) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f00000000c0)={0x11}) 8.184896787s ago: executing program 4 (id=3925): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x5, 0x84) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957eff13d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254"], 0x208}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x8895, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x100f}}) socket(0x22, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0x24fd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 8.007760703s ago: executing program 4 (id=3926): pipe(&(0x7f0000000000)) socket$inet(0x2, 0x3, 0x33) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1de) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff000000003609080000000000c39af0ffa0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.841218393s ago: executing program 3 (id=3932): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x103) getsockopt$sock_int(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000001700)=[{{0x0, 0x1000ffd8, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000039e, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7fd, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002c23b740c71b4010b1b501020301090224000100000000090400000212"], 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) 5.837966692s ago: executing program 0 (id=3941): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8}]}}]}, 0xac}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) 5.830715093s ago: executing program 4 (id=3942): syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x4, 0x4}, {0xa, 0x100}}}}, 0x11) syz_open_dev$dri(&(0x7f0000000a80), 0x0, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f00000000c0), 0x10, &(0x7f00000004c0), 0x300}, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x1ff, 0x8, 0x2}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0405"], 0x7) r2 = gettid() r3 = getpgid(0x0) tgkill(r3, r2, 0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "9c"}]}], {0x14}}, 0x74}}, 0x0) socket(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000b40)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{}, {0x0, [{@none, 0x81, 0x4, 0x9, "16312a", 0x59, 0x2}, {@none, 0xa5, 0x5, 0x1, 't\'F', 0x0, 0xdf}, {@any, 0x8, 0x9, 0x77, "c28ff5", 0x6, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x91, 0x6, 0xc0, "2ba04d", 0x2, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9, 0xb, 0xbc, "9cc968", 0x0, 0x5}, {@none, 0xfe, 0x6b, 0xf4, "88381e", 0x0, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x8, 0xac, "2e8598", 0x5, 0x4}, {@any, 0x4, 0xf8, 0x4, "e3335e", 0x5, 0x4}]}}}, 0xffffffffffffff64) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000700)={0x6, 'veth1_to_batadv\x00', {0x2}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000008c0)={0x0, 'veth0_vlan\x00', {0xffe}}) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') 4.726749323s ago: executing program 0 (id=3933): syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0300002e4b9a01000000000000003830263086fb6d356680321766ad61a57e11d554ab1c7fb9a9f756b5d76bf697e96a4d6540fa8db267a38334b120912977ada9d05af232f6ad2c870b58162fb79505bd2c6d39ac32fbabf132310de3c0d7a46b376d5c99e2000000000000000000000000000000004a9f7698e4c13a993e2aea45efa58e640c51b2c0804c46403bbd0387ed7aa95dea4b66baecb1a74ac7a1fd60f4795b3f923d9f080e42efbe0d1de2fd5fbd24c77acbb31c7549d559218661db3c16a099dfa86de76ee889b0496cc01e56485ea5c31b5534d4c0f22ba55d750e140a0c0368d4988cf4dfe3dd2afb1aae07346deb7e29f769ec4b47019b3289a86cfe31e5b1cdc4af16cc05f6507572627d413535138d2b770231272faad903da2f633426c081f36206efb5c1"], 0x39) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x4000090) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000006010000f8ffffffbfa400000000000007040000f0fffdffb70200000800000018230000", @ANYRES32=r0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22", @ANYRES16=0x0, @ANYRESOCT], 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) select(0xff00, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x100}, 0x0, &(0x7f0000000040)) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000013c0)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 4.726362824s ago: executing program 4 (id=3934): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x218, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x6, 0xb2cc575b459b5b33, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) socket(0x0, 0x0, 0x0) io_setup(0x3b, &(0x7f00000010c0)) openat$bsg(0xffffffffffffff9c, &(0x7f0000006840), 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af0203010902"], 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 4.636111671s ago: executing program 1 (id=3935): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) 4.478719488s ago: executing program 1 (id=3936): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) 4.388051423s ago: executing program 1 (id=3937): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x168) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x6}, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) 3.439501857s ago: executing program 1 (id=3938): r0 = socket(0x1e, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0xe6f5a70bc2ee9db6, 0xffffffffffffffff, 0x0) close(r2) r3 = io_uring_setup(0x168e, &(0x7f0000000140)={0x0, 0x0, 0x820, 0x3, 0xfffffffd}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="71d346a4cfde3b70a32282", 0xb}], 0x1}}], 0x1, 0x9200000000000000) r5 = dup3(r4, r0, 0x0) recvmmsg$unix(r5, &(0x7f0000008b40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x58ca02a0, 0x0) 2.339121773s ago: executing program 4 (id=3939): unshare(0x4020400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}, 0x2}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1864, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x0, &(0x7f0000000180)) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x202ddd, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) 2.24705246s ago: executing program 3 (id=3940): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) munmap(&(0x7f0000ff2000/0x2000)=nil, 0x2000) madvise(&(0x7f0000e02000/0x4000)=nil, 0x4000, 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x17) r4 = dup(r3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendfile(r6, r4, 0x0, 0x8a000) 2.196164685s ago: executing program 1 (id=3943): ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) ioprio_set$pid(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xf}}, [@TCA_RATE={0x6, 0x5, {0x4, 0xa}}, @qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x6}]}}, @qdisc_kind_options=@q_red={{0x8}, {0x48, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x5, 0x0, 0x1, 0x8, 0xa, 0x10, 0x2}}, @TCA_RED_FLAGS={0xc, 0x4, {0x3, 0x3}}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x4}, @TCA_RED_MAX_P={0x8, 0x3, 0x400}, @TCA_RED_MAX_P={0x8, 0x3, 0x10}, @TCA_RED_FLAGS={0xc, 0x4, {0x3, 0xf}}]}}]}, 0x90}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x5) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_dev$loop(&(0x7f00000001c0), 0x40000000001, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r4) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) 1.77016894s ago: executing program 0 (id=3944): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fanotify_init(0x200, 0x0) r3 = dup(r2) write$FUSE_NOTIFY_INVAL_INODE(r3, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) rt_sigaction(0x3e, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clock_gettime(0xcadf4450ba5b0c31, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000300)={0xe0001, 0x0, [0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x2, 0x7]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x13, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000611185000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e066f30fa7c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1, 0x0, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@remote, @multicast2}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.355431012s ago: executing program 4 (id=3945): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x11, 0x148, 0x0, 0x0, 0x178, 0x2a8, 0x2a8, 0x178, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff990908", @ANYRES32=0xffffffffffffffff], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_emit_ethernet(0x66, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000180)=""/97, 0x61) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0x0, 0xff, 0x0, 0x0, "cccf6b3d79281e285e89024a2866ebaa10fe00c15dc352ec0f119204d2d2c0b8"}) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_usb_connect$uac1(0x0, 0xda, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000003600)=""/120) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000000000000400CDr/se', @ANYRES32=r0, @ANYRES64=0x0, @ANYRESDEC=0x0]) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000200)={{0x0, 0x1}, {0x10, 0x9f}, 0xfffffffc}) 749.612792ms ago: executing program 0 (id=3946): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x41) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004640)={0x0}}, 0x8000) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) munmap(&(0x7f0000ff2000/0x2000)=nil, 0x2000) ioctl$int_in(r1, 0x5421, 0x0) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES8]) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'veth1_virt_wifi\x00', 0x1}, 0x18) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x81800) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8a000) r5 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) 399.062643ms ago: executing program 3 (id=3947): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) 260.370118ms ago: executing program 3 (id=3948): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) 199.726669ms ago: executing program 3 (id=3949): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x0}) r1 = syz_io_uring_setup(0x237, &(0x7f0000000300)={0x0, 0x200000, 0x10100, 0x3}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x4000, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x110, 0x0, &(0x7f0000000240), &(0x7f0000000040)) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000200)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) socket$rxrpc(0x21, 0x2, 0xa) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000412ff8), 0x0) r5 = accept(0xffffffffffffffff, 0x0, 0x0) r6 = syz_io_uring_setup(0x4172, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) sendmsg$kcm(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000002c0)="4c6b85f76cdfdfd0", 0x8}], 0x1}, 0xd5) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.controllers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r9, 0x28, 0x8, &(0x7f0000000100), 0x112) 44.51619ms ago: executing program 1 (id=3950): r0 = userfaultfd(0x80801) syz_clone3(&(0x7f0000000480)={0x100000000, &(0x7f0000000040), &(0x7f0000000240)=0x0, &(0x7f00000002c0), {0xd}, &(0x7f0000000300)=""/115, 0x73, &(0x7f0000000a40)=""/163, &(0x7f0000000440)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) process_vm_readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/185, 0xb9}], 0x1, &(0x7f0000000800)=[{&(0x7f0000000600)=""/58, 0x3a}, {&(0x7f0000000640)=""/52, 0x34}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000680)=""/26, 0x1a}, {&(0x7f00000006c0)=""/123, 0x7b}, {&(0x7f0000000740)=""/174, 0xae}], 0x6, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) memfd_create(&(0x7f0000002180)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\b\x00\x00\x00\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(0xffffffffffffffff, 0x800000000000002) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x1) flock(r3, 0x1) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@enum={0x3}, @union={0xe, 0x2, 0x0, 0x5, 0x0, 0xfff, [{0x0, 0x3}, {0x6, 0x3, 0x1}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) flock(r4, 0x1) flock(r2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x2003, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000a40)=ANY=[], 0x0, 0x1800000, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=3951): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r0, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x218, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x6, 0xb2cc575b459b5b33, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) socket(0x0, 0x0, 0x0) io_setup(0x3b, &(0x7f00000010c0)) openat$bsg(0xffffffffffffff9c, &(0x7f0000006840), 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af0203010902"], 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): detected [ 1882.868142][T28571] team_slave_1: entered allmulticast mode [ 1882.883149][T28571] team0: entered promiscuous mode [ 1882.899909][T28571] team_slave_1: entered promiscuous mode [ 1882.923216][T28571] bridge0: port 3(team0) entered blocking state [ 1882.930137][T28571] bridge0: port 3(team0) entered forwarding state [ 1883.258055][ T29] audit: type=1326 audit(1729199140.497:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28568 comm="syz.4.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2964d7dff9 code=0x7ffc0000 [ 1883.282906][ T29] audit: type=1326 audit(1729199140.497:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28568 comm="syz.4.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2964d7dff9 code=0x7ffc0000 [ 1883.295963][ T8] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1883.306677][ T29] audit: type=1326 audit(1729199140.497:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28568 comm="syz.4.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f2964d7dff9 code=0x7ffc0000 [ 1883.336886][ T29] audit: type=1326 audit(1729199140.497:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28568 comm="syz.4.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2964d7dff9 code=0x7ffc0000 [ 1883.359471][ T29] audit: type=1326 audit(1729199140.497:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28568 comm="syz.4.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2964d7dbfb code=0x7ffc0000 [ 1883.382334][ T29] audit: type=1326 audit(1729199140.497:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28568 comm="syz.4.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2964d7dbfb code=0x7ffc0000 [ 1883.405362][ T29] audit: type=1326 audit(1729199140.527:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28568 comm="syz.4.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2964db00e5 code=0x7ffc0000 [ 1883.474661][ T29] audit: type=1326 audit(1729199140.727:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28568 comm="syz.4.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2964d7dff9 code=0x7ffc0000 [ 1883.529389][ T29] audit: type=1326 audit(1729199140.727:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28568 comm="syz.4.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2964d7dff9 code=0x7ffc0000 [ 1883.587894][ T8] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1883.608715][ T29] audit: type=1326 audit(1729199140.727:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28568 comm="syz.4.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2964d7dbfb code=0x7ffc0000 [ 1883.644034][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1883.664719][ T52] hsr_slave_0: left promiscuous mode [ 1883.674191][ T8] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1883.695517][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1883.722910][ T52] hsr_slave_1: left promiscuous mode [ 1883.754620][ T8] usb 4-1: config 0 descriptor?? [ 1883.772689][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1883.797766][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1883.835499][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1883.843038][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1883.904361][ T52] veth1_macvtap: left promiscuous mode [ 1883.910036][ T52] veth0_macvtap: left promiscuous mode [ 1883.916983][ T52] veth1_vlan: left promiscuous mode [ 1883.923282][ T52] veth0_vlan: left promiscuous mode [ 1883.975253][ T8] ath6kl: Failed to submit usb control message: -71 [ 1883.999914][ T8] ath6kl: unable to send the bmi data to the device: -71 [ 1884.011633][ T8] ath6kl: Unable to send get target info: -71 [ 1884.046328][ T8] ath6kl: Failed to init ath6kl core: -71 [ 1884.064750][ T8] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1884.118714][T11715] hub 5-1:0.0: hub_ext_port_status failed (err = 0) [ 1884.122705][ T8] usb 4-1: USB disconnect, device number 120 [ 1884.349780][ T8408] usb 5-1: USB disconnect, device number 12 [ 1884.356197][T11715] usb 5-1: Failed to suspend device, error -19 [ 1884.454619][T21095] Bluetooth: hci1: command tx timeout [ 1885.421808][ T52] team0 (unregistering): Port device team_slave_1 removed [ 1885.637955][ T52] team0 (unregistering): Port device team_slave_0 removed [ 1885.994540][T28626] kvm: pic: non byte write [ 1886.536821][T21095] Bluetooth: hci1: command tx timeout [ 1886.863062][T28604] geneve0: entered promiscuous mode [ 1886.869439][T28604] macvlan2: entered promiscuous mode [ 1886.884230][T28604] macvlan2: entered allmulticast mode [ 1886.890754][T28604] geneve0: entered allmulticast mode [ 1887.127591][T28574] chnl_net:caif_netlink_parms(): no params data found [ 1887.627010][T28574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1887.654437][T28574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1887.680237][T28574] bridge_slave_0: entered allmulticast mode [ 1887.724186][T28574] bridge_slave_0: entered promiscuous mode [ 1887.776990][T28574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1887.808894][T28574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1887.888858][T28574] bridge_slave_1: entered allmulticast mode [ 1887.950536][T28662] capability: warning: `syz.3.3680' uses 32-bit capabilities (legacy support in use) [ 1887.963082][T28574] bridge_slave_1: entered promiscuous mode [ 1888.091376][T28574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1888.129447][T28574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1888.322664][T28574] team0: Port device team_slave_0 added [ 1888.462803][T28574] team0: Port device team_slave_1 added [ 1888.614649][T21095] Bluetooth: hci1: command tx timeout [ 1888.656173][T28574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1888.713912][T28574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1888.758619][ T8] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1888.864096][T28574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1888.878374][T28574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1888.895621][T28574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1888.942936][T28574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1888.953965][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 1888.989133][ T8] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1889.004214][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1889.012310][ T8] usb 1-1: Product: syz [ 1889.016694][ T8] usb 1-1: Manufacturer: syz [ 1889.021536][ T8] usb 1-1: SerialNumber: syz [ 1889.028832][ T8] usb 1-1: config 0 descriptor?? [ 1889.319381][ T8] speedtch 1-1:0.0: speedtch_bind: wrong device class 68 [ 1889.354002][ T8] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1889.489356][T28574] hsr_slave_0: entered promiscuous mode [ 1889.517278][T28574] hsr_slave_1: entered promiscuous mode [ 1889.552695][T28574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1889.602938][T28574] Cannot create hsr debugfs directory [ 1890.103634][ T5285] usb 1-1: USB disconnect, device number 120 [ 1890.158829][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 1890.158849][ T29] audit: type=1326 audit(1729199147.407:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28699 comm="syz.3.3685" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0801f7dff9 code=0x0 [ 1890.360473][T28704] x_tables: duplicate underflow at hook 3 [ 1890.541205][T28710] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1890.547834][T28710] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1890.564869][T28710] vhci_hcd vhci_hcd.0: Device attached [ 1890.641364][T28710] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 1890.647963][T28710] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1890.712027][T21095] Bluetooth: hci1: command tx timeout [ 1890.759200][T28710] vhci_hcd vhci_hcd.0: Device attached [ 1890.797676][ T5299] vhci_hcd: vhci_device speed not set [ 1890.906715][ T5299] usb 17-1: new full-speed USB device number 2 using vhci_hcd [ 1890.972722][T28727] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(9) [ 1890.979290][T28727] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1891.188610][T28727] vhci_hcd vhci_hcd.0: Device attached [ 1891.326263][T28733] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(12) [ 1891.332949][T28733] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1891.640815][T28733] vhci_hcd vhci_hcd.0: Device attached [ 1891.695171][T28722] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 1891.701869][T28722] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1891.855791][T28742] vhci_hcd: connection closed [ 1891.855791][T28722] vhci_hcd vhci_hcd.0: Device attached [ 1891.912736][ T52] vhci_hcd: stop threads [ 1891.917649][ T52] vhci_hcd: release socket [ 1891.927110][ T52] vhci_hcd: disconnect device [ 1891.956239][T28711] vhci_hcd: connection reset by peer [ 1891.956669][T28716] vhci_hcd: connection closed [ 1891.962517][T28730] vhci_hcd: connection closed [ 1891.964883][T28734] vhci_hcd: connection closed [ 1891.967651][ T11] vhci_hcd: stop threads [ 1891.993384][ T11] vhci_hcd: release socket [ 1892.024169][ T11] vhci_hcd: disconnect device [ 1892.100674][ T11] vhci_hcd: stop threads [ 1892.149257][ T11] vhci_hcd: release socket [ 1892.205648][ T11] vhci_hcd: disconnect device [ 1892.233403][ T11] vhci_hcd: stop threads [ 1892.264290][ T11] vhci_hcd: release socket [ 1892.269005][ T11] vhci_hcd: disconnect device [ 1892.282054][ T11] vhci_hcd: stop threads [ 1892.303708][ T11] vhci_hcd: release socket [ 1892.308897][ T11] vhci_hcd: disconnect device [ 1892.510537][T28574] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1892.549215][T28574] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1892.588463][T28574] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1892.602577][T28574] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1893.137857][T28574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1893.580420][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.738554][T28574] 8021q: adding VLAN 0 to HW filter on device team0 [ 1893.854674][ T8408] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1893.899418][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1894.048201][ T8408] usb 5-1: config 0 has no interfaces? [ 1894.057658][ T8408] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1894.161633][ T8408] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1894.183602][ T8408] usb 5-1: Product: syz [ 1894.190187][ T8408] usb 5-1: Manufacturer: syz [ 1894.200170][ T8408] usb 5-1: SerialNumber: syz [ 1894.240380][ T8408] usb 5-1: config 0 descriptor?? [ 1894.305426][T25742] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1894.320240][T25742] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1894.332646][T25742] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1894.385791][T25742] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1894.405164][T25742] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1894.415193][T25742] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1894.543030][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1894.686676][ T2920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1894.693920][ T2920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1894.713486][T28776] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1894.765475][ T8] usb 5-1: USB disconnect, device number 13 [ 1894.828291][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1894.852458][ T2920] bridge0: port 2(bridge_slave_1) entered blocking state [ 1894.859714][ T2920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1894.879479][T28798] netlink: 'syz.0.3701': attribute type 8 has an invalid length. [ 1894.904160][ T5231] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1895.103714][ T5231] usb 4-1: Using ep0 maxpacket: 32 [ 1895.115819][ T5231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1895.127221][ T5231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1895.144375][ T5231] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1895.153552][ T5231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1895.176649][ T5231] usb 4-1: config 0 descriptor?? [ 1895.383621][T28574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1895.448368][ T11] bridge_slave_1: left allmulticast mode [ 1895.459532][ T11] bridge_slave_1: left promiscuous mode [ 1895.471921][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1895.500739][ T11] bridge_slave_0: left allmulticast mode [ 1895.534005][ T11] bridge_slave_0: left promiscuous mode [ 1895.576432][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1895.702397][ T5231] kye 0003:0458:5016.0030: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1895.726203][ T5231] kye 0003:0458:5016.0030: hidraw0: USB HID v0.00 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 1895.750567][ T5231] kye 0003:0458:5016.0030: tablet-enabling feature report not found [ 1895.773897][ T5231] kye 0003:0458:5016.0030: tablet enabling failed [ 1895.908742][ T5290] usb 4-1: USB disconnect, device number 121 [ 1896.046997][ T5299] vhci_hcd: vhci_device speed not set [ 1896.535048][T21095] Bluetooth: hci4: command tx timeout [ 1897.061062][T28848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3707'. [ 1897.665904][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1897.706458][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1897.728303][ T11] bond0 (unregistering): Released all slaves [ 1897.764273][ T5290] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1897.806729][T28845] batadv0: entered promiscuous mode [ 1897.812177][T28845] vlan2: entered promiscuous mode [ 1897.829564][T28845] vlan2: entered allmulticast mode [ 1897.856715][T28845] batadv0: entered allmulticast mode [ 1897.883101][T28845] batadv0: left allmulticast mode [ 1897.925687][T28845] batadv0: left promiscuous mode [ 1897.965008][ T5290] usb 4-1: Using ep0 maxpacket: 8 [ 1897.974681][ T5290] usb 4-1: config 0 has no interfaces? [ 1897.980238][ T5290] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1898.030339][ T5290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1898.060788][T28795] chnl_net:caif_netlink_parms(): no params data found [ 1898.064639][ T5290] usb 4-1: config 0 descriptor?? [ 1898.536521][T28852] @ÿ: renamed from veth0_vlan (while UP) [ 1898.558349][T28574] veth0_vlan: entered promiscuous mode [ 1898.595803][T28574] veth1_vlan: entered promiscuous mode [ 1898.615889][T21095] Bluetooth: hci4: command tx timeout [ 1898.656705][ T11] hsr_slave_0: left promiscuous mode [ 1898.683609][ T11] hsr_slave_1: left promiscuous mode [ 1898.713109][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1898.725628][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1898.738661][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1898.758919][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1898.848790][ T11] veth1_macvtap: left promiscuous mode [ 1898.862467][ T11] veth0_macvtap: left promiscuous mode [ 1898.876396][ T11] veth1_vlan: left promiscuous mode [ 1898.889481][ T11] veth0_vlan: left promiscuous mode [ 1898.925631][ T8408] usb 4-1: USB disconnect, device number 122 [ 1899.741134][ T8408] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1899.911479][ T8408] usb 1-1: Using ep0 maxpacket: 32 [ 1899.920266][ T8408] usb 1-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 16 [ 1899.938488][ T8408] usb 1-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1899.968809][ T8408] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1899.991831][ T8408] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1900.003480][ T8408] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1900.040660][ T8408] usb 1-1: Product: syz [ 1900.046467][ T8408] usb 1-1: Manufacturer: syz [ 1900.052310][ T8408] usb 1-1: SerialNumber: syz [ 1900.109590][T28914] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1900.118774][T28914] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1900.268802][T28924] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3716'. [ 1900.482258][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1900.547866][T11715] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1900.570412][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1900.697082][T21095] Bluetooth: hci4: command tx timeout [ 1900.761733][T11715] usb 5-1: config 0 has an invalid interface number: 250 but max is 0 [ 1900.771403][T11715] usb 5-1: config 0 has an invalid descriptor of length 25, skipping remainder of the config [ 1900.816211][T11715] usb 5-1: config 0 has no interface number 0 [ 1900.833125][T11715] usb 5-1: config 0 interface 250 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1900.844674][T11715] usb 5-1: config 0 interface 250 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1900.861081][T11715] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 1900.880695][T11715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.916465][T11715] usb 5-1: config 0 descriptor?? [ 1901.114656][T11715] usb 5-1: reset high-speed USB device number 14 using dummy_hcd [ 1901.181848][T28932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1901.209780][T28932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1901.482462][T28922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1901.492592][T28922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1901.642312][T28795] bridge0: port 1(bridge_slave_0) entered blocking state [ 1901.654086][T28795] bridge0: port 1(bridge_slave_0) entered disabled state [ 1901.661470][T28795] bridge_slave_0: entered allmulticast mode [ 1901.670929][T28795] bridge_slave_0: entered promiscuous mode [ 1901.682343][T28912] netlink: 'syz.0.3713': attribute type 4 has an invalid length. [ 1901.713563][T28928] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1901.734927][ T8408] usb 1-1: USB disconnect, device number 121 [ 1901.741140][T28928] dvmrp1: linktype set to 512 [ 1901.762740][T28795] bridge0: port 2(bridge_slave_1) entered blocking state [ 1901.771232][T28795] bridge0: port 2(bridge_slave_1) entered disabled state [ 1901.780058][T28795] bridge_slave_1: entered allmulticast mode [ 1901.791357][T28795] bridge_slave_1: entered promiscuous mode [ 1901.860736][T28795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1901.900396][T28795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1902.032671][T28574] veth0_macvtap: entered promiscuous mode [ 1902.105424][T28795] team0: Port device team_slave_0 added [ 1902.148062][T28795] team0: Port device team_slave_1 added [ 1902.177226][T28574] veth1_macvtap: entered promiscuous mode [ 1902.263754][T28795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1902.284007][T28795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1902.354353][T11715] usb 5-1: USB disconnect, device number 14 [ 1902.383898][T28795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1902.443745][T28795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1902.463936][T28795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1902.506090][T28950] No such timeout policy "syz0" [ 1902.523993][T28795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1902.537118][T28950] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 1902.586367][T28574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1902.636830][T28574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1902.696620][T28574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1902.737123][T28574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1902.776181][T21095] Bluetooth: hci4: command tx timeout [ 1902.777315][T28574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1902.823902][T28574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1902.839498][T28574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1902.871722][T28574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1902.948101][T28574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1903.066726][T28574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1903.148663][T28942] delete_channel: no stack [ 1903.159637][T28574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1903.304105][T28574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1903.429736][T28574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1903.487683][T28574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1903.604198][T28574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1903.686850][T28574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1903.741280][T28574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1903.756313][T11715] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1903.775496][T28574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1903.803367][T28574] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1903.868889][T28574] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1903.915323][T28574] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1903.942851][T28574] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1903.983154][T28795] hsr_slave_0: entered promiscuous mode [ 1903.995542][T11715] usb 1-1: Using ep0 maxpacket: 16 [ 1904.027198][T28795] hsr_slave_1: entered promiscuous mode [ 1904.034843][T11715] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1904.049519][T11715] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1904.064030][T11715] usb 1-1: New USB device found, idVendor=006b, idProduct=0101, bcdDevice= 0.40 [ 1904.079930][T11715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.089396][T11715] usb 1-1: Product: syz [ 1904.095806][T11715] usb 1-1: Manufacturer: syz [ 1904.104376][T11715] usb 1-1: SerialNumber: syz [ 1904.234274][ T5299] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1904.244044][ T29] audit: type=1326 audit(1729199161.487:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28976 comm="syz.4.3725" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2964d7dff9 code=0x0 [ 1904.363085][T28979] netlink: 22 bytes leftover after parsing attributes in process `syz.4.3725'. [ 1904.434420][ T5299] usb 4-1: Using ep0 maxpacket: 16 [ 1904.472165][ T5299] usb 4-1: descriptor type invalid, skip [ 1904.496599][ T5299] usb 4-1: config 0 has no interfaces? [ 1904.528396][ T5299] usb 4-1: New USB device found, idVendor=0af0, idProduct=7031, bcdDevice=78.43 [ 1904.579761][ T5299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.626359][ T2920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1904.627537][ T5299] usb 4-1: Product: syz [ 1904.638834][ T2920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1904.681170][ T5299] usb 4-1: Manufacturer: syz [ 1904.714616][ T5299] usb 4-1: SerialNumber: syz [ 1904.758602][ T5299] usb 4-1: config 0 descriptor?? [ 1904.814178][T19432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1904.823132][T19432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1905.493146][T28795] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1905.534021][T28795] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1905.584091][T28795] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1905.638829][T28795] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1906.134754][T28795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1906.279255][T28795] 8021q: adding VLAN 0 to HW filter on device team0 [ 1906.351586][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1906.358817][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1906.470156][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1906.477400][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1906.827636][T28795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1907.040030][ T5237] usb 4-1: USB disconnect, device number 123 [ 1907.146317][T28795] veth0_vlan: entered promiscuous mode [ 1907.193338][T28795] veth1_vlan: entered promiscuous mode [ 1907.275537][T29008] binder: BINDER_SET_CONTEXT_MGR already set [ 1907.281697][T29008] binder: 29007:29008 ioctl 4018620d 20000100 returned -16 [ 1907.291843][T29008] binder: BINDER_SET_CONTEXT_MGR already set [ 1907.298319][T29008] binder: 29007:29008 ioctl 4018620d 20000040 returned -16 [ 1907.372568][T28795] veth0_macvtap: entered promiscuous mode [ 1907.382090][T11715] usb 1-1: 0:2 : does not exist [ 1907.424089][T11715] usb 1-1: USB disconnect, device number 122 [ 1907.458288][T28409] udevd[28409]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1907.608263][T28795] veth1_macvtap: entered promiscuous mode [ 1907.737943][T28795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1907.780342][T28795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1907.797671][T28795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1907.808626][T28795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1907.819752][T28795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1907.830531][T28795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1907.840890][T28795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1907.851471][T28795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1907.861397][T28795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1907.872181][T28795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1907.884457][T28795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1907.907288][T28795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1907.918080][T28795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1907.928243][T28795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1907.938755][T28795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1907.948684][T28795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1907.959426][T28795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1907.969380][T28795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1907.980750][T28795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1907.991723][T28795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1908.003350][T28795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1908.016145][T28795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1908.027643][T28795] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1908.036473][T28795] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1908.045507][T28795] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1908.054677][T28795] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1908.274537][T19432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1908.282398][T19432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1908.480454][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1908.506607][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1909.707702][T29052] xt_policy: neither incoming nor outgoing policy selected [ 1911.946052][ T5285] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 1912.154240][ T5285] usb 1-1: device descriptor read/64, error -71 [ 1912.424190][ T5285] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 1912.643968][ T5285] usb 1-1: device descriptor read/64, error -71 [ 1912.754888][ T5285] usb usb1-port1: attempt power cycle [ 1912.764039][ T5290] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1912.930871][ T5290] usb 4-1: Using ep0 maxpacket: 16 [ 1912.947638][ T5290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1912.963718][ T5290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1912.973710][ T5290] usb 4-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 1912.988241][ T5290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1913.023276][ T5290] usb 4-1: config 0 descriptor?? [ 1913.094794][ T5285] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 1913.134779][ T5285] usb 1-1: device descriptor read/8, error -71 [ 1913.395193][ T5285] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 1913.424801][ T5285] usb 1-1: device descriptor read/8, error -71 [ 1913.452824][T29070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1913.471813][T29070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1913.534646][ T5285] usb usb1-port1: unable to enumerate USB device [ 1914.284291][T27063] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1914.287970][ T5290] usbhid 4-1:0.0: can't add hid device: -71 [ 1914.309281][ T5290] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1914.343049][ T5290] usb 4-1: USB disconnect, device number 124 [ 1914.484079][T27063] usb 5-1: Using ep0 maxpacket: 8 [ 1914.516254][T27063] usb 5-1: config 0 has an invalid interface number: 6 but max is 2 [ 1914.535127][T27063] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 1914.543382][T27063] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1914.588928][T27063] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 1914.629502][T27063] usb 5-1: config 0 has no interface number 0 [ 1914.653982][T27063] usb 5-1: config 0 has no interface number 1 [ 1914.668409][T27063] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1914.703587][T27063] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1914.741992][T27063] usb 5-1: config 0 descriptor?? [ 1914.779133][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.785908][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.820961][T27063] usb 5-1: unknown number of interfaces: 2 [ 1915.070424][T29097] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3746'. [ 1915.546474][ T29] audit: type=1326 audit(1729199172.797:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29110 comm="syz.3.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0801f7dff9 code=0x7ffc0000 [ 1915.572958][ T29] audit: type=1326 audit(1729199172.797:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29110 comm="syz.3.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0801f7dff9 code=0x7ffc0000 [ 1915.600140][ T29] audit: type=1326 audit(1729199172.797:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29110 comm="syz.3.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f0801f7dff9 code=0x7ffc0000 [ 1915.626439][ T29] audit: type=1326 audit(1729199172.797:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29110 comm="syz.3.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0801f7dff9 code=0x7ffc0000 [ 1915.653102][ T29] audit: type=1326 audit(1729199172.797:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29110 comm="syz.3.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0801f7c990 code=0x7ffc0000 [ 1915.680519][ T29] audit: type=1326 audit(1729199172.797:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29110 comm="syz.3.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0801f7dbfb code=0x7ffc0000 [ 1915.703297][ T29] audit: type=1326 audit(1729199172.797:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29110 comm="syz.3.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0801f7dbfb code=0x7ffc0000 [ 1915.726272][ T29] audit: type=1326 audit(1729199172.797:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29110 comm="syz.3.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0801f7dbfb code=0x7ffc0000 [ 1915.750467][ T29] audit: type=1326 audit(1729199172.797:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29110 comm="syz.3.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0801f7dbfb code=0x7ffc0000 [ 1915.774576][ T29] audit: type=1326 audit(1729199172.927:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29110 comm="syz.3.3752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0801f7dbfb code=0x7ffc0000 [ 1915.803974][T27063] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1915.970237][T27063] usb 4-1: config 0 has an invalid interface number: 182 but max is 0 [ 1915.982877][T27063] usb 4-1: config 0 has no interface number 0 [ 1915.990649][T27063] usb 4-1: New USB device found, idVendor=eb1a, idProduct=e350, bcdDevice=f8.fa [ 1916.000814][T27063] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.011281][T27063] usb 4-1: config 0 descriptor?? [ 1916.046233][T29121] fuse: Bad value for 'fd' [ 1916.289679][ T5290] usb 4-1: USB disconnect, device number 125 [ 1916.354064][ T938] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1916.524306][ T938] usb 1-1: Using ep0 maxpacket: 8 [ 1916.541370][ T938] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1916.551101][ T938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1916.559817][ T938] usb 1-1: Product: syz [ 1916.564136][ T938] usb 1-1: Manufacturer: syz [ 1916.568767][ T938] usb 1-1: SerialNumber: syz [ 1916.575490][ T938] usb 1-1: config 0 descriptor?? [ 1916.794507][ T938] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1916.993121][T11715] usb 5-1: USB disconnect, device number 15 [ 1917.033351][T29129] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1917.058686][T29129] picdev_read: 76 callbacks suppressed [ 1917.058710][T29129] kvm: pic: non byte read [ 1917.071312][T29129] kvm: pic: level sensitive irq not supported [ 1917.071476][T29129] kvm: pic: non byte read [ 1917.083080][T29129] kvm: pic: level sensitive irq not supported [ 1917.083249][T29129] kvm: pic: non byte read [ 1917.104234][T29129] kvm: pic: level sensitive irq not supported [ 1917.104468][T29129] kvm: pic: non byte read [ 1917.116496][T29129] kvm: pic: level sensitive irq not supported [ 1917.116667][T29129] kvm: pic: non byte read [ 1917.664522][T11715] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1917.673963][T27063] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1917.815455][T27063] usb 5-1: device descriptor read/64, error -71 [ 1917.846762][T11715] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1917.856072][T11715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.866990][T11715] usb 4-1: config 0 descriptor?? [ 1918.064135][T27063] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 1918.204043][T27063] usb 5-1: device descriptor read/64, error -71 [ 1918.317225][T27063] usb usb5-port1: attempt power cycle [ 1918.428113][ T938] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1918.439107][ T938] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1918.447372][ T938] usb 1-1: media controller created [ 1918.466872][ T938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1918.486340][T29141] SET target dimension over the limit! [ 1918.525591][ T938] i2c i2c-1: Added multiplexed i2c bus 2 [ 1918.533677][ T938] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 1918.542593][ T938] usb 1-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 1918.565657][ T938] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 1918.646214][ T938] DVB: Unable to find symbol r820t_attach() [ 1918.663906][T27063] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1918.701252][T27063] usb 5-1: device descriptor read/8, error -71 [ 1918.739333][ T938] usb 1-1: USB disconnect, device number 127 [ 1918.944204][T27063] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1918.975854][T27063] usb 5-1: device descriptor read/8, error -71 [ 1919.086570][T27063] usb usb5-port1: unable to enumerate USB device [ 1919.554253][T11715] usb 4-1: Cannot set autoneg [ 1919.560664][T11715] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1919.589704][T11715] usb 4-1: USB disconnect, device number 126 [ 1919.779810][T29155] ebt_limit: overflow, try lower: 570423552/2483027968 [ 1921.773663][T29185] netlink: 'syz.1.3770': attribute type 1 has an invalid length. [ 1922.024349][ T938] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1922.170594][ T938] usb 1-1: device descriptor read/64, error -71 [ 1922.208162][T29183] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3769'. [ 1922.434948][ T938] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1922.564302][ T938] usb 1-1: device descriptor read/64, error -71 [ 1922.696616][ T938] usb usb1-port1: attempt power cycle [ 1923.081708][ T938] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1923.144699][ T938] usb 1-1: device descriptor read/8, error -71 [ 1923.414035][ T938] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1923.434703][ T938] usb 1-1: device descriptor read/8, error -71 [ 1923.548326][ T938] usb usb1-port1: unable to enumerate USB device [ 1923.934187][T11715] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1924.116805][T11715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1924.129243][T11715] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1924.144330][T11715] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1924.158458][T11715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1924.179192][T11715] usb 4-1: config 0 descriptor?? [ 1924.543996][T27063] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1924.713911][T27063] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1924.731363][T27063] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1924.762908][T27063] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1924.798155][T27063] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1924.833447][T27063] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1924.852652][T29208] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1925.864082][ T5231] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 1926.079527][T27063] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 1926.108750][T27063] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input87 [ 1926.127756][ T5231] usb 1-1: no configurations [ 1926.191917][ T5231] usb 1-1: can't read configurations, error -22 [ 1926.220780][T27063] usb 5-1: USB disconnect, device number 20 [ 1926.226847][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1926.444018][ T5231] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 1926.542656][T11715] usbhid 4-1:0.0: can't add hid device: -71 [ 1926.564552][T11715] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1926.592204][T11715] usb 4-1: USB disconnect, device number 127 [ 1926.644865][ T5231] usb 1-1: no configurations [ 1926.650884][ T5231] usb 1-1: can't read configurations, error -22 [ 1926.680001][ T5231] usb usb1-port1: attempt power cycle [ 1926.890009][T29232] netlink: 'syz.4.3783': attribute type 16 has an invalid length. [ 1926.899036][T29232] netlink: 'syz.4.3783': attribute type 3 has an invalid length. [ 1926.909213][T29232] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.3783'. [ 1927.033977][ T5231] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1927.065466][ T5231] usb 1-1: no configurations [ 1927.070149][ T5231] usb 1-1: can't read configurations, error -22 [ 1927.104276][T21095] Bluetooth: hci2: command 0x0406 tx timeout [ 1927.223960][ T5231] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 1927.262893][ T5231] usb 1-1: no configurations [ 1927.268314][ T5231] usb 1-1: can't read configurations, error -22 [ 1927.283202][ T5231] usb usb1-port1: unable to enumerate USB device [ 1927.999723][T29242] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3786'. [ 1928.192575][ T5299] IPVS: starting estimator thread 0... [ 1928.314064][T29244] IPVS: using max 23 ests per chain, 55200 per kthread [ 1928.735945][ T5231] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1928.874083][ T5231] usb 5-1: device descriptor read/64, error -71 [ 1928.922509][T29256] netlink: 'syz.3.3790': attribute type 10 has an invalid length. [ 1928.968958][T29256] team0: Port device wlan1 added [ 1929.113958][ T5231] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1929.244209][ T5231] usb 5-1: device descriptor read/64, error -71 [ 1929.355742][ T5231] usb usb5-port1: attempt power cycle [ 1929.694376][ T5231] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1929.714879][ T5231] usb 5-1: device descriptor read/8, error -71 [ 1929.871243][T29265] lo: entered promiscuous mode [ 1929.879350][T29262] lo: left promiscuous mode [ 1929.954073][ T5231] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1929.977209][ T5231] usb 5-1: device descriptor read/8, error -71 [ 1930.094409][ T5231] usb usb5-port1: unable to enumerate USB device [ 1930.273995][T27063] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1930.425615][T27063] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1930.437548][T27063] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1930.448964][T27063] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1930.460161][T27063] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1930.473422][T27063] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1930.483949][T27063] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1930.495747][T27063] usb 4-1: config 0 descriptor?? [ 1930.926121][T27063] plantronics 0003:047F:FFFF.0031: No inputs registered, leaving [ 1930.959373][T27063] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1931.812528][T11715] usb 4-1: USB disconnect, device number 2 [ 1931.904274][ T5290] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1932.111957][ T5290] usb 5-1: Using ep0 maxpacket: 32 [ 1932.123683][ T5290] usb 5-1: New USB device found, idVendor=054c, idProduct=0025, bcdDevice= 1.00 [ 1932.153837][ T5290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1932.184285][ T5290] usb 5-1: Product: syz [ 1932.188614][ T5290] usb 5-1: Manufacturer: syz [ 1932.201374][ T5290] usb 5-1: SerialNumber: syz [ 1932.244980][ T5290] usb 5-1: config 0 descriptor?? [ 1932.266921][ T5290] usb 5-1: bad CDC descriptors [ 1932.272016][ T5290] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1932.317721][ T5290] usb-storage 5-1:0.0: Quirks match for vid 054c pid 0025: 1 [ 1932.583957][ T5285] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1932.604170][T27063] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1932.764554][T27063] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1932.789737][T27063] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1932.790493][ T5285] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1932.857300][T27063] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 1932.884947][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1932.914179][T27063] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1932.942655][ T5285] usb 4-1: config 0 descriptor?? [ 1933.021999][T27063] usb 1-1: Product: syz [ 1933.060324][T27063] usb 1-1: Manufacturer: syz [ 1933.065727][T27063] usb 1-1: SerialNumber: syz [ 1933.086412][T27063] usb 1-1: config 0 descriptor?? [ 1933.130678][T27063] option 1-1:0.0: GSM modem (1-port) converter detected [ 1933.407323][ T5285] ath6kl: Unsupported hardware version: 0x0 [ 1933.453021][ T5285] ath6kl: Failed to init ath6kl core: -22 [ 1933.459364][ T5285] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 1934.542310][ T5299] usb 5-1: USB disconnect, device number 25 [ 1935.434066][ T5285] usb 1-1: USB disconnect, device number 10 [ 1935.469148][ T5285] option 1-1:0.0: device disconnected [ 1935.570614][T21095] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1935.797609][ T5285] usb 4-1: USB disconnect, device number 3 [ 1935.945188][ T5299] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1936.112371][ T5299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1936.153930][ T5299] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1936.174310][ T5299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1936.201537][ T5299] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1936.229953][ T5299] usb 5-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 1936.249835][ T5299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1936.284129][ T5299] usb 5-1: Product: syz [ 1936.295171][ T5299] usb 5-1: Manufacturer: syz [ 1936.309240][ T5299] usb 5-1: SerialNumber: syz [ 1936.329069][ T5299] usb 5-1: config 0 descriptor?? [ 1936.343110][ T5299] ti_usb_3410_5052 5-1:0.0: TI USB 3410 1 port adapter converter detected [ 1936.381292][ T5299] usb 5-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 1936.953693][ T5285] usb 5-1: USB disconnect, device number 26 [ 1936.979647][ T5285] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 1936.990903][ T5285] ti_usb_3410_5052 5-1:0.0: device disconnected [ 1937.584416][T21095] Bluetooth: hci2: command 0x0406 tx timeout [ 1937.651877][T29356] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3818'. [ 1938.274199][ T5231] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1938.428201][ T5231] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1938.443301][ T5231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.473925][ T5231] usb 5-1: Product: syz [ 1938.488755][ T5231] usb 5-1: Manufacturer: syz [ 1938.501450][ T5231] usb 5-1: SerialNumber: syz [ 1938.515047][ T5231] usb 5-1: config 0 descriptor?? [ 1938.536850][ T5231] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1939.376563][ T5231] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 1939.388144][ T5231] sq905c 5-1:0.0: Reading version command failed [ 1939.394649][ T5231] sq905c 5-1:0.0: probe with driver sq905c failed with error -110 [ 1939.696754][T29378] syzkaller0: entered promiscuous mode [ 1939.712643][T29378] syzkaller0: entered allmulticast mode [ 1939.727141][ T5231] usb 5-1: USB disconnect, device number 27 [ 1940.049054][T29388] program syz.0.3827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1941.063130][T29406] bridge0: port 2(bridge_slave_1) entered disabled state [ 1941.754040][T29414] netlink: 19 bytes leftover after parsing attributes in process `syz.4.3833'. [ 1941.996067][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 1941.996090][ T29] audit: type=1326 audit(1729199199.237:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29413 comm="syz.4.3833" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2964d7dff9 code=0x0 [ 1942.454191][T25742] Bluetooth: hci0: command 0x0406 tx timeout [ 1944.603146][T25742] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1944.617752][T25742] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1944.627477][T25742] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1944.635626][T25742] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1944.643658][T25742] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1944.828229][T25742] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1945.694548][T27063] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1945.779181][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1945.907440][T27063] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1945.932054][T27063] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1945.971626][T27063] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 1945.982126][T27063] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1946.019600][T27063] usb 4-1: Product: syz [ 1946.029742][T27063] usb 4-1: Manufacturer: syz [ 1946.061999][T27063] usb 4-1: SerialNumber: syz [ 1946.078642][T27063] usb 4-1: config 0 descriptor?? [ 1946.102641][T27063] option 4-1:0.0: GSM modem (1-port) converter detected [ 1946.294782][T29450] program syz.1.3840 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1946.379181][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1946.427067][T29450] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551614) [ 1946.444468][T29450] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 1946.666837][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1946.756599][T29436] chnl_net:caif_netlink_parms(): no params data found [ 1946.849981][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1946.940583][T25742] Bluetooth: hci1: command tx timeout [ 1947.149000][T29436] bridge0: port 1(bridge_slave_0) entered blocking state [ 1947.191569][T29436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1947.225764][T29436] bridge_slave_0: entered allmulticast mode [ 1947.252935][T29436] bridge_slave_0: entered promiscuous mode [ 1947.282323][T29436] bridge0: port 2(bridge_slave_1) entered blocking state [ 1947.314518][T29436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1947.321785][T29436] bridge_slave_1: entered allmulticast mode [ 1947.349016][T29436] bridge_slave_1: entered promiscuous mode [ 1947.412441][T29436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1947.495866][T29436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1947.592028][T21095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1947.624103][T21095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1947.641587][T21095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1947.658068][T21095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1947.668838][T21095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1947.678456][T21095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1948.589899][T29436] team0: Port device team_slave_0 added [ 1948.598335][T29436] team0: Port device team_slave_1 added [ 1948.876825][ T62] bridge_slave_1: left allmulticast mode [ 1948.882529][ T62] bridge_slave_1: left promiscuous mode [ 1948.916450][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1948.941680][ T62] bridge_slave_0: left allmulticast mode [ 1948.966782][ T62] bridge_slave_0: left promiscuous mode [ 1948.977985][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1949.017008][T21095] Bluetooth: hci1: command tx timeout [ 1949.503979][T11715] usb 4-1: USB disconnect, device number 4 [ 1949.518445][T11715] option 4-1:0.0: device disconnected [ 1949.825088][T21095] Bluetooth: hci2: command tx timeout [ 1950.031253][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1950.043489][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1950.055957][ T62] bond0 (unregistering): Released all slaves [ 1950.084312][T29436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1950.091587][T29436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1950.121085][T29436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1950.148539][T29484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3847'. [ 1950.258351][T29436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1950.268629][T29436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1950.302632][T29436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1951.093985][T25742] Bluetooth: hci1: command tx timeout [ 1951.206123][T29436] hsr_slave_0: entered promiscuous mode [ 1951.213341][T29436] hsr_slave_1: entered promiscuous mode [ 1951.222446][T29436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1951.230323][T29436] Cannot create hsr debugfs directory [ 1951.457815][ T62] hsr_slave_0: left promiscuous mode [ 1951.470525][ T62] hsr_slave_1: left promiscuous mode [ 1951.477753][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1951.485754][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1951.494926][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1951.503676][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1951.529392][ T62] veth1_macvtap: left promiscuous mode [ 1951.535305][ T62] veth0_macvtap: left promiscuous mode [ 1951.540945][ T62] veth1_vlan: left promiscuous mode [ 1951.547129][ T62] veth0_vlan: left promiscuous mode [ 1951.894241][T25742] Bluetooth: hci2: command tx timeout [ 1952.154350][T27063] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 1952.315771][T27063] usb 4-1: config 0 has no interfaces? [ 1952.334393][T27063] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1952.343653][T27063] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1952.352708][T27063] usb 4-1: Product: syz [ 1952.357588][T27063] usb 4-1: Manufacturer: syz [ 1952.362245][T27063] usb 4-1: SerialNumber: syz [ 1952.369958][T27063] usb 4-1: config 0 descriptor?? [ 1952.508655][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1952.580971][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1952.583969][T27063] usb 4-1: USB disconnect, device number 5 [ 1952.709415][T25742] Bluetooth: hci3: command 0x0406 tx timeout [ 1953.195689][T21095] Bluetooth: hci1: command tx timeout [ 1953.729565][T29503] netlink: 'syz.1.3851': attribute type 12 has an invalid length. [ 1953.973955][T21095] Bluetooth: hci2: command tx timeout [ 1954.048545][T29466] chnl_net:caif_netlink_parms(): no params data found [ 1954.920194][T29466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1954.938138][T29466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1954.970548][T29466] bridge_slave_0: entered allmulticast mode [ 1954.990725][T29466] bridge_slave_0: entered promiscuous mode [ 1955.091078][T29466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1955.102075][T29466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1955.121708][T29466] bridge_slave_1: entered allmulticast mode [ 1955.132150][T29466] bridge_slave_1: entered promiscuous mode [ 1955.275129][ T5237] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1955.498138][T29466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1955.513052][T29466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1955.585904][ T5237] usb 5-1: Using ep0 maxpacket: 8 [ 1955.593166][ T5237] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1955.603269][ T5237] usb 5-1: config 8 has an invalid interface number: 165 but max is 0 [ 1955.625781][ T5237] usb 5-1: config 8 has an invalid descriptor of length 48, skipping remainder of the config [ 1955.636695][ T5237] usb 5-1: config 8 has no interface number 0 [ 1955.643917][ T5237] usb 5-1: config 8 interface 165 altsetting 1 has an endpoint descriptor with address 0xCC, changing to 0x8C [ 1955.656052][ T5237] usb 5-1: config 8 interface 165 altsetting 1 bulk endpoint 0x8C has invalid maxpacket 4 [ 1955.666448][ T5237] usb 5-1: config 8 interface 165 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1955.679651][ T5237] usb 5-1: config 8 interface 165 has no altsetting 0 [ 1955.722521][ T5237] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=32.e3 [ 1955.744509][ T5237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1955.752595][ T5237] usb 5-1: Product: Ñ• [ 1955.767850][ T5237] usb 5-1: Manufacturer: Б [ 1955.772598][ T5237] usb 5-1: SerialNumber: syz [ 1955.829642][T29535] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1955.869764][T29553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3856'. [ 1955.959645][T29466] team0: Port device team_slave_0 added [ 1956.009382][T29466] team0: Port device team_slave_1 added [ 1956.054374][T21095] Bluetooth: hci2: command tx timeout [ 1956.058039][ T5237] ir_toy 5-1:8.165: required endpoints not found [ 1956.124267][ T5237] usb 5-1: USB disconnect, device number 28 [ 1956.418692][T29466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1956.454221][T29466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1956.487106][T29466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1956.501022][T29466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1956.513656][T29466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1956.545955][T29466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1956.718450][T11715] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 1956.727019][T11715] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 1956.783997][T11715] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 1956.814514][T11715] hid-generic 0000:0000:0000.0032: item fetching failed at offset 6/43 [ 1956.825558][T11715] hid-generic 0000:0000:0000.0032: probe with driver hid-generic failed with error -22 [ 1956.867186][T29466] hsr_slave_0: entered promiscuous mode [ 1956.919037][T29466] hsr_slave_1: entered promiscuous mode [ 1956.954431][T29466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1956.977179][T29466] Cannot create hsr debugfs directory [ 1956.987350][T29436] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1957.115412][T29436] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1957.150122][T29436] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1957.209874][T11715] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 1957.270524][T29436] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1957.476071][T11715] usb 4-1: no configurations [ 1957.480759][T11715] usb 4-1: can't read configurations, error -22 [ 1957.521209][T29466] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1957.624768][T11715] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 1957.706801][T29466] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1957.796356][T11715] usb 4-1: no configurations [ 1957.801041][T11715] usb 4-1: can't read configurations, error -22 [ 1957.824681][T11715] usb usb4-port1: attempt power cycle [ 1957.910264][T29466] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1957.948249][T29599] binder: 29598:29599 unknown command 0 [ 1957.982883][T29599] binder: 29598:29599 ioctl c0306201 200001c0 returned -22 [ 1958.000912][T29436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1958.182177][T29466] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1958.205102][T11715] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 1958.235667][T11715] usb 4-1: no configurations [ 1958.240348][T11715] usb 4-1: can't read configurations, error -22 [ 1958.302688][T29436] 8021q: adding VLAN 0 to HW filter on device team0 [ 1958.371543][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1958.378761][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1958.387963][T11715] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 1958.470205][T11715] usb 4-1: no configurations [ 1958.476754][T11715] usb 4-1: can't read configurations, error -22 [ 1958.490067][T29616] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3865'. [ 1958.500316][T11715] usb usb4-port1: unable to enumerate USB device [ 1958.537224][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1958.544465][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1958.663915][ T5299] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1958.840838][ T5299] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1958.860809][ T5299] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1958.886028][T29466] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1958.912989][ T5299] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 1958.943055][ T5299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1958.963809][ T5299] usb 5-1: Product: syz [ 1958.977065][ T5299] usb 5-1: Manufacturer: syz [ 1958.997137][ T5299] usb 5-1: SerialNumber: syz [ 1959.023382][ T5299] usb 5-1: config 0 descriptor?? [ 1959.058526][ T5299] option 5-1:0.0: GSM modem (1-port) converter detected [ 1959.102836][T29466] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1959.155897][T29466] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1959.216806][T29466] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1959.266996][T29436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1959.553220][T29436] veth0_vlan: entered promiscuous mode [ 1959.670073][T29436] veth1_vlan: entered promiscuous mode [ 1959.713002][T29466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1959.866412][T29466] 8021q: adding VLAN 0 to HW filter on device team0 [ 1959.933545][T29436] veth0_macvtap: entered promiscuous mode [ 1959.973574][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1959.980773][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1960.047562][T29436] veth1_macvtap: entered promiscuous mode [ 1960.081241][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1960.088451][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1960.207620][T29436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1960.261832][T29436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1960.314064][T29436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1960.357205][T29436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1960.374047][T29436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1960.414843][T29436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1960.449205][T29436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1960.477422][T29436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1960.511969][T29436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1960.546946][T29436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1960.589474][T29436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1960.679365][T29436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1960.721376][T29436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1960.757632][T29436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1960.794429][T29436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1960.826025][T29436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1960.866277][T29436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1960.904393][T29436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1960.951303][T29436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1960.983200][T29436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1961.052510][T29436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1961.109042][T29436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1961.165799][T29436] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1961.217889][T29436] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1961.267387][T29436] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1961.298203][T29436] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1961.798863][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1961.848859][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1961.994184][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1962.002079][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1962.012132][T29466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1962.122904][ T5299] usb 5-1: USB disconnect, device number 29 [ 1962.172936][T29466] veth0_vlan: entered promiscuous mode [ 1962.183377][ T5299] option 5-1:0.0: device disconnected [ 1962.186101][T29466] veth1_vlan: entered promiscuous mode [ 1962.247895][T29466] veth0_macvtap: entered promiscuous mode [ 1962.286954][T29466] veth1_macvtap: entered promiscuous mode [ 1962.419815][T29466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1962.455216][T29466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1962.484306][T29466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1962.508893][T29466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1962.533642][T29466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1962.563880][T29466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1962.574379][T29466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1962.605567][T29466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1962.626346][T29466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1962.652641][T29466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1962.704074][T29466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1962.751276][T29466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1962.806239][T29466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1962.873104][T29466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1962.907531][T29466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1962.930575][T29466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1962.967504][T29466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1962.979174][T29466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1962.991607][T29466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1963.001880][T29466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1963.033890][T29466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1963.062684][T29466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1963.090387][T29466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1963.123607][T29466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1963.123985][ T5299] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1963.145738][T29466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1963.166671][T29466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1963.254976][T29466] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1963.277925][T29466] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1963.294082][T29466] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1963.295990][ T5299] usb 5-1: config 0 has an invalid descriptor of length 233, skipping remainder of the config [ 1963.323143][T29466] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1963.330700][ T5299] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1963.356998][ T5299] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 1963.404167][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1963.468574][ T5299] usb 5-1: config 0 descriptor?? [ 1963.529358][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1963.544390][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1963.629020][ T2920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1963.644330][ T2920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1964.188086][T29690] binder: 29688:29690 unknown command 0 [ 1964.208527][T29690] binder: 29688:29690 ioctl c0306201 200001c0 returned -22 [ 1964.622551][T29701] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1964.884340][ T5285] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1965.043991][ T5285] usb 1-1: Using ep0 maxpacket: 8 [ 1965.051236][ T5285] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1965.063172][ T5285] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 1965.075328][ T5285] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1965.086934][ T5285] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1965.099432][ T5285] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1965.107460][ T5285] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 1965.120735][ T5285] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1965.132546][ T5285] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1965.144984][ T5285] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1965.152470][ T5285] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 1965.165650][ T5285] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1965.177651][ T5285] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1965.191254][ T5285] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1965.201033][ T5285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.209229][ T5285] usb 1-1: Product: syz [ 1965.216435][ T5285] usb 1-1: Manufacturer: syz [ 1965.227449][ T5285] usb 1-1: SerialNumber: syz [ 1965.455836][T29701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1965.492174][ T5299] usb 5-1: string descriptor 0 read error: -71 [ 1965.512134][T29701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1965.515655][ T5299] usb 5-1: USB disconnect, device number 30 [ 1965.904041][ T5299] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1965.914367][ T938] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1966.063922][ T5299] usb 5-1: Using ep0 maxpacket: 8 [ 1966.070781][ T5299] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1966.080760][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1966.090978][ T5299] usb 5-1: config 0 descriptor?? [ 1966.094059][ T938] usb 4-1: Using ep0 maxpacket: 8 [ 1966.123145][ T938] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1966.132798][ T938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1966.142036][ T938] usb 4-1: Product: syz [ 1966.148404][ T938] usb 4-1: Manufacturer: syz [ 1966.153095][ T938] usb 4-1: SerialNumber: syz [ 1966.161137][ T938] usb 4-1: config 0 descriptor?? [ 1966.172248][ T938] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1967.516110][ T5285] adutux 1-1:168.0: interrupt endpoints not found [ 1967.529923][ T5285] usb 1-1: USB disconnect, device number 11 [ 1968.182024][ T5299] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 1968.201760][ T5299] asix 5-1:0.0: probe with driver asix failed with error -71 [ 1968.213374][ T5299] usb 5-1: USB disconnect, device number 31 [ 1969.034253][T11715] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1969.184749][T11715] usb 5-1: Using ep0 maxpacket: 8 [ 1969.195986][T11715] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1969.206387][T11715] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1969.217447][T11715] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 1969.227460][T11715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1969.238536][T11715] usb 5-1: config 0 descriptor?? [ 1969.464302][T29730] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3888'. [ 1969.689059][ T5290] usb 5-1: USB disconnect, device number 32 [ 1969.897442][ T938] gspca_sonixj: Unknown sensor 0000 [ 1970.105539][ T938] gspca_sonixj: reg_w err -71 [ 1970.111915][ T938] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1970.125966][ T938] usb 4-1: USB disconnect, device number 10 [ 1970.579467][ T8] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1970.734203][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 1970.771911][ T8] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1970.800216][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.823208][ T8] usb 5-1: Product: syz [ 1970.837484][ T8] usb 5-1: Manufacturer: syz [ 1970.855851][ T8] usb 5-1: SerialNumber: syz [ 1970.877236][ T8] usb 5-1: config 0 descriptor?? [ 1970.902713][ T8] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1971.124709][ T5299] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 1971.282536][ T5299] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1971.294160][ T5299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.302317][ T5299] usb 1-1: Product: syz [ 1971.306910][ T5299] usb 1-1: Manufacturer: syz [ 1971.311597][ T5299] usb 1-1: SerialNumber: syz [ 1971.336216][ T5299] usb 1-1: config 0 descriptor?? [ 1971.551144][ T5299] dvb_usb_dtv5100 1-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 1971.594105][ T5299] usb 1-1: USB disconnect, device number 12 [ 1971.607442][ T8] gspca_ov534_9: reg_w failed -110 [ 1971.816198][T21095] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1971.825544][T21095] Bluetooth: hci2: Injecting HCI hardware error event [ 1971.837794][T25742] Bluetooth: hci2: hardware error 0x00 [ 1972.003910][ T8] gspca_ov534_9: Unknown sensor 0000 [ 1972.004013][ T8] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 1972.048229][ T8] usb 5-1: USB disconnect, device number 33 [ 1972.438041][T29757] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3897'. [ 1972.516226][T21095] Bluetooth: hci0: unexpected event for opcode 0x002c [ 1972.558559][T29757] tap0: tun_chr_ioctl cmd 1074812118 [ 1972.794323][ T5299] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1972.956592][ T5299] usb 5-1: Using ep0 maxpacket: 32 [ 1972.967664][ T5299] usb 5-1: config index 0 descriptor too short (expected 2340, got 36) [ 1972.979409][ T5299] usb 5-1: config 0 has an invalid descriptor of length 226, skipping remainder of the config [ 1972.992388][ T5299] usb 5-1: config 0 has no interfaces? [ 1972.998370][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1973.007488][ T5299] usb 5-1: New USB device found, idVendor=037d, idProduct=00f9, bcdDevice= 0.00 [ 1973.020048][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.034886][ T5299] usb 5-1: config 0 descriptor?? [ 1973.164121][ T5237] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 1973.179013][ T8] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1973.188321][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.196672][ T8] usb 4-1: Product: syz [ 1973.210380][ T8] usb 4-1: Manufacturer: syz [ 1973.215217][ T8] usb 4-1: SerialNumber: syz [ 1973.229295][ T8] usb 4-1: config 0 descriptor?? [ 1973.326084][ T5237] usb 1-1: config 0 has no interfaces? [ 1973.337215][ T5237] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1973.347457][ T5237] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1973.369788][ T5237] usb 1-1: Product: syz [ 1973.374866][ T5237] usb 1-1: Manufacturer: syz [ 1973.382547][ T5237] usb 1-1: SerialNumber: syz [ 1973.407466][ T5237] usb 1-1: config 0 descriptor?? [ 1973.452340][ T8] usb 4-1: ignoring: probably an ADSL modem [ 1973.636998][ T938] usb 1-1: USB disconnect, device number 13 [ 1973.687101][ T8] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1973.719496][ T8] usb 4-1: USB disconnect, device number 11 [ 1973.904439][T25742] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1974.581668][T29780] block device autoloading is deprecated and will be removed. [ 1975.642630][T11715] usb 5-1: USB disconnect, device number 34 [ 1975.852421][T29798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3910'. [ 1975.953408][T29800] netlink: 'syz.3.3911': attribute type 10 has an invalid length. [ 1975.970700][T29800] bridge0: port 2(bridge_slave_1) entered disabled state [ 1975.978399][T29800] bridge0: port 1(bridge_slave_0) entered disabled state [ 1976.173585][T29800] bridge0: port 2(bridge_slave_1) entered blocking state [ 1976.180848][T29800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1976.188394][T29800] bridge0: port 1(bridge_slave_0) entered blocking state [ 1976.195576][T29800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1976.209113][T29800] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1976.227635][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.237161][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.247537][T29801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3911'. [ 1976.260096][T29801] bridge_slave_1: left allmulticast mode [ 1976.321504][T29801] bridge_slave_1: left promiscuous mode [ 1976.354378][T29801] bridge0: port 2(bridge_slave_1) entered disabled state [ 1976.396907][T29801] bridge_slave_0: left allmulticast mode [ 1976.413686][T29801] bridge_slave_0: left promiscuous mode [ 1976.436897][T29801] bridge0: port 1(bridge_slave_0) entered disabled state [ 1976.534510][T25742] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1976.545036][T25742] Bluetooth: hci0: Injecting HCI hardware error event [ 1976.555393][T21095] Bluetooth: hci0: hardware error 0x00 [ 1976.788167][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1976.836581][T29801] bond0: (slave bridge0): Releasing backup interface [ 1976.997756][ T8] usb 4-1: config 0 has an invalid interface number: 212 but max is 0 [ 1977.020949][ T8] usb 4-1: config 0 has no interface number 0 [ 1977.033110][ T8] usb 4-1: config 0 interface 212 has no altsetting 0 [ 1977.055035][ T8] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 1977.064737][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.072846][ T8] usb 4-1: Product: syz [ 1977.077222][ T8] usb 4-1: Manufacturer: syz [ 1977.081858][ T8] usb 4-1: SerialNumber: syz [ 1977.094797][ T8] usb 4-1: config 0 descriptor?? [ 1977.110980][ T8] ftdi_sio 4-1:0.212: FTDI USB Serial Device converter detected [ 1977.131453][ T8] usb 4-1: Detected FT4232HP [ 1977.254196][ T5290] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1977.339982][T29800] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.3911'. [ 1977.364536][T29800] openvswitch: netlink: Actions may not be safe on all matching packets [ 1977.391283][ T8] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1977.414091][ T5290] usb 1-1: Using ep0 maxpacket: 8 [ 1977.438376][ T5290] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1977.438684][ T8] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1977.452919][ T5290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.468674][ T5290] usb 1-1: Product: syz [ 1977.472866][ T5290] usb 1-1: Manufacturer: syz [ 1977.477841][ T5290] usb 1-1: SerialNumber: syz [ 1977.495744][ T5290] usb 1-1: config 0 descriptor?? [ 1977.553411][ T8] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1977.574906][ T8] usb 4-1: USB disconnect, device number 12 [ 1977.585888][ T8] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1977.596701][ T8] ftdi_sio 4-1:0.212: device disconnected [ 1977.724632][ T5290] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1977.802236][T29811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1977.926339][T29811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1978.074404][T29810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1978.614423][T21095] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1979.439043][ T5290] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1979.456015][ T5290] usb 1-1: USB disconnect, device number 14 [ 1979.933963][ T5231] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1980.104419][ T5231] usb 4-1: Using ep0 maxpacket: 8 [ 1980.112756][ T5231] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1980.131825][ T5231] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1980.148711][ T5231] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1980.159358][ T5231] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1980.179785][ T5231] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1980.219633][ T5231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1980.446815][ T5231] usb 4-1: GET_CAPABILITIES returned 0 [ 1980.458716][ T5231] usbtmc 4-1:16.0: can't read capabilities [ 1980.663469][ T5231] usb 4-1: USB disconnect, device number 13 [ 1981.094172][T11715] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1981.261447][T11715] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1981.288451][T11715] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1981.312342][T11715] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1981.330411][T11715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1981.357332][T29844] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1981.376240][T11715] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1981.524423][ T5231] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 1981.643464][ T5237] usb 5-1: USB disconnect, device number 35 [ 1981.699820][ T5231] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1981.709899][ T5231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.718545][ T5231] usb 4-1: Product: syz [ 1981.722904][ T5231] usb 4-1: Manufacturer: syz [ 1981.727837][ T5231] usb 4-1: SerialNumber: syz [ 1981.739754][ T5231] usb 4-1: config 0 descriptor?? [ 1981.982545][T29846] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3923'. [ 1982.005196][ T5231] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 1982.215410][ T5231] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 1982.222741][ T5231] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 1982.243529][ T5231] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 1982.324927][ T5231] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 1982.472896][ T5231] usb 4-1: USB disconnect, device number 14 [ 1982.784183][ T5290] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1982.958043][ T5290] usb 5-1: config 0 has no interfaces? [ 1982.973396][ T5290] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1982.992604][ T5290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1983.005601][ T5290] usb 5-1: Product: syz [ 1983.009866][ T5290] usb 5-1: Manufacturer: syz [ 1983.018747][ T5290] usb 5-1: SerialNumber: syz [ 1983.029511][ T5290] usb 5-1: config 0 descriptor?? [ 1983.450653][T29852] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1983.544081][ T5231] usb 5-1: USB disconnect, device number 36 [ 1985.043885][ T938] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1985.267447][ T938] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1985.298563][ T938] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1985.359100][ T938] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 1985.386968][ T938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1985.414494][ T938] usb 4-1: Product: syz [ 1985.503338][ T938] usb 4-1: Manufacturer: syz [ 1985.508802][ T938] usb 4-1: SerialNumber: syz [ 1985.524706][ T938] usb 4-1: config 0 descriptor?? [ 1985.634726][ T938] option 4-1:0.0: GSM modem (1-port) converter detected [ 1986.123916][ T5231] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1986.285320][ T5231] usb 1-1: Using ep0 maxpacket: 32 [ 1986.293205][ T5231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 250, changing to 11 [ 1986.307762][ T5231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16485, setting to 1024 [ 1986.328646][ T5231] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1986.346184][ T5231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1986.365087][ T5231] usb 1-1: config 0 descriptor?? [ 1986.373244][ T5231] hub 1-1:0.0: USB hub found [ 1986.564317][ T5237] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 1986.584273][ T5231] hub 1-1:0.0: 1 port detected [ 1986.693888][T25742] Bluetooth: hci6: command tx timeout [ 1986.731557][ T5237] usb 5-1: config 0 has no interfaces? [ 1986.751802][ T5237] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1986.769593][ T5237] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1986.791952][ T5237] usb 5-1: Product: syz [ 1986.805304][ T5237] usb 5-1: Manufacturer: syz [ 1986.819734][ T5237] usb 5-1: SerialNumber: syz [ 1986.842395][ T5237] usb 5-1: config 0 descriptor?? [ 1986.986275][ T29] audit: type=1326 audit(1729199244.237:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29890 comm="syz.0.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7db7dff9 code=0x7ffc0000 [ 1987.053901][ T29] audit: type=1326 audit(1729199244.237:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29890 comm="syz.0.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f7e7db7dff9 code=0x7ffc0000 [ 1987.114281][ T5237] usb 5-1: USB disconnect, device number 37 [ 1987.133477][ T29] audit: type=1326 audit(1729199244.237:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29890 comm="syz.0.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7db7dff9 code=0x7ffc0000 [ 1987.238010][ T29] audit: type=1326 audit(1729199244.237:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29890 comm="syz.0.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7db7dff9 code=0x7ffc0000 [ 1987.364232][ T29] audit: type=1326 audit(1729199244.237:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29890 comm="syz.0.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7e7db7dbfb code=0x7ffc0000 [ 1987.411440][ T29] audit: type=1326 audit(1729199244.237:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29890 comm="syz.0.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7e7db7dbfb code=0x7ffc0000 [ 1987.464622][ T29] audit: type=1326 audit(1729199244.267:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29890 comm="syz.0.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7e7dbb00e5 code=0x7ffc0000 [ 1987.527069][ T29] audit: type=1326 audit(1729199244.467:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29890 comm="syz.0.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7db7dff9 code=0x7ffc0000 [ 1987.592368][ T29] audit: type=1326 audit(1729199244.467:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29890 comm="syz.0.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e7db7dff9 code=0x7ffc0000 [ 1987.677745][ T29] audit: type=1326 audit(1729199244.477:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29890 comm="syz.0.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7e7db7dbfb code=0x7ffc0000 [ 1987.840467][ T5231] hub 1-1:0.0: hub_ext_port_status failed (err = 0) [ 1988.038418][ T5237] usb 4-1: USB disconnect, device number 15 [ 1988.044654][ T5290] usb 1-1: USB disconnect, device number 15 [ 1988.045693][ T5237] option 4-1:0.0: device disconnected [ 1989.374311][ T5237] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1989.534327][ T5237] usb 5-1: Using ep0 maxpacket: 8 [ 1989.563582][ T5237] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1989.572222][ T5237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1989.604138][ T5237] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1989.648826][ T5237] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1989.699514][ T5237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1989.732619][ T5237] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1989.771584][ T5237] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1989.779920][ T5237] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1989.795957][ T5237] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1989.831439][ T5237] usb 5-1: string descriptor 0 read error: -22 [ 1989.838201][ T5237] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1989.853907][ T5237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1989.869210][ T5237] adutux 5-1:168.0: interrupt endpoints not found [ 1990.004499][T29921] program syz.0.3946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1990.073105][T29917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1990.090831][T29917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1990.130732][ T5237] usb 5-1: USB disconnect, device number 38 [ 1991.224023][ T5231] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 1991.375586][ T5231] usb 4-1: config 0 has no interfaces? [ 1991.385116][ T5231] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1991.404264][ T5231] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1991.427288][ T5231] usb 4-1: Product: syz [ 1991.434283][ T5231] usb 4-1: Manufacturer: syz [ 1991.443044][ T5231] usb 4-1: SerialNumber: syz [ 1991.452216][ T5231] usb 4-1: config 0 descriptor?? [ 1991.670012][ T5290] usb 4-1: USB disconnect, device number 16 [ 1993.654138][T29939] Bluetooth: hci6: command 0x0406 tx timeout [ 2004.796915][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2004.889971][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2004.972844][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2005.050453][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2005.170593][ T11] bridge_slave_1: left allmulticast mode [ 2005.178922][ T11] bridge_slave_1: left promiscuous mode [ 2005.190727][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 2005.205901][ T11] bridge_slave_0: left allmulticast mode [ 2005.211572][ T11] bridge_slave_0: left promiscuous mode [ 2005.218334][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 2005.709000][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2005.724395][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2005.739735][ T11] bond0 (unregistering): Released all slaves [ 2006.149640][ T11] hsr_slave_0: left promiscuous mode [ 2006.163413][ T11] hsr_slave_1: left promiscuous mode [ 2006.175484][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2006.194150][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2006.224413][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2006.232000][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2006.295813][T29939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2006.310103][T29939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2006.324657][T29939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2006.326994][ T11] veth1_macvtap: left promiscuous mode [ 2006.344098][ T11] veth0_macvtap: left promiscuous mode [ 2006.350109][ T11] veth1_vlan: left promiscuous mode [ 2006.356469][T29939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2006.356521][ T11] veth0_vlan: left promiscuous mode [ 2006.370531][T29939] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2006.381167][T29939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2007.082400][ T11] team0 (unregistering): Port device team_slave_1 removed [ 2007.151976][ T11] team0 (unregistering): Port device team_slave_0 removed [ 2008.001376][T29960] chnl_net:caif_netlink_parms(): no params data found [ 2008.229771][T29960] bridge0: port 1(bridge_slave_0) entered blocking state [ 2008.243992][T29960] bridge0: port 1(bridge_slave_0) entered disabled state [ 2008.251367][T29960] bridge_slave_0: entered allmulticast mode [ 2008.267907][T29960] bridge_slave_0: entered promiscuous mode [ 2008.290254][T29960] bridge0: port 2(bridge_slave_1) entered blocking state [ 2008.307097][T29960] bridge0: port 2(bridge_slave_1) entered disabled state [ 2008.318553][T29960] bridge_slave_1: entered allmulticast mode [ 2008.328079][T29960] bridge_slave_1: entered promiscuous mode [ 2008.373553][T29960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2008.401641][T29960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2008.439647][T29960] team0: Port device team_slave_0 added [ 2008.454554][T25742] Bluetooth: hci1: command tx timeout [ 2008.457351][T29960] team0: Port device team_slave_1 added [ 2008.491378][T29960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2008.498898][T29960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2008.527378][T29960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2008.544018][T29960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2008.551081][T29960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2008.578245][T29960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2008.653678][T29960] hsr_slave_0: entered promiscuous mode [ 2008.669869][T29960] hsr_slave_1: entered promiscuous mode [ 2008.680573][T29960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2008.693662][T29960] Cannot create hsr debugfs directory [ 2009.399035][T29960] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2009.416207][T29960] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2009.428151][T29960] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2009.448122][T29960] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2009.549140][T29960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2009.580039][T29960] 8021q: adding VLAN 0 to HW filter on device team0 [ 2009.593201][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2009.600414][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2009.619709][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2009.626870][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2009.695573][T29960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2009.748880][T29960] veth0_vlan: entered promiscuous mode [ 2009.769581][T29960] veth1_vlan: entered promiscuous mode [ 2009.801821][T29960] veth0_macvtap: entered promiscuous mode [ 2009.811867][T29960] veth1_macvtap: entered promiscuous mode [ 2009.831944][T29960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2009.842583][T29960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2009.853055][T29960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2009.864181][T29960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2009.875455][T29960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2009.886357][T29960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2009.896704][T29960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2009.907979][T29960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2009.918243][T29960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2009.929200][T29960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2009.939699][T29960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2009.950337][T29960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2009.961651][T29960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2009.987193][T29960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2009.998145][T29960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2010.008686][T29960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2010.019866][T29960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2010.030099][T29960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2010.040605][T29960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2010.050798][T29960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2010.062110][T29960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2010.072021][T29960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2010.083444][T29960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2010.093636][T29960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2010.104533][T29960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2010.116562][T29960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2010.128605][T29960] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2010.139445][T29960] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2010.148521][T29960] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2010.157366][T29960] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2010.274996][ T2920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2010.294554][ T2920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2010.321174][ T2920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2010.341277][ T2920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2010.534163][T25742] Bluetooth: hci1: command tx timeout [ 2012.613993][T25742] Bluetooth: hci1: command tx timeout [ 2014.694490][T25742] Bluetooth: hci1: command tx timeout [ 2019.254561][T29939] Bluetooth: hci4: command 0x0406 tx timeout [ 2037.665826][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.672208][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 2066.566988][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2066.661396][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2066.759621][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2066.859287][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2067.016283][ T12] bridge_slave_1: left allmulticast mode [ 2067.022147][ T12] bridge_slave_1: left promiscuous mode [ 2067.030402][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2067.039427][ T12] bridge_slave_0: left allmulticast mode [ 2067.045651][ T12] bridge_slave_0: left promiscuous mode [ 2067.051365][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2067.583006][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2067.600122][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2067.611542][ T12] bond0 (unregistering): Released all slaves [ 2067.937739][ T12] hsr_slave_0: left promiscuous mode [ 2067.954606][ T12] hsr_slave_1: left promiscuous mode [ 2067.968874][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2067.979721][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2067.991598][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2068.014965][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2068.073572][T29939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2068.094229][ T12] veth1_macvtap: left promiscuous mode [ 2068.099825][ T12] veth0_macvtap: left promiscuous mode [ 2068.105808][T29939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2068.115207][ T12] veth1_vlan: left promiscuous mode [ 2068.120683][T29939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2068.142941][T29939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2068.146156][ T12] veth0_vlan: left promiscuous mode [ 2068.165647][T29939] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2068.175897][T29939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2068.916224][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2068.981103][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2069.837501][T30101] chnl_net:caif_netlink_parms(): no params data found [ 2069.996044][T30101] bridge0: port 1(bridge_slave_0) entered blocking state [ 2070.014023][T30101] bridge0: port 1(bridge_slave_0) entered disabled state [ 2070.021472][T30101] bridge_slave_0: entered allmulticast mode [ 2070.044845][T30101] bridge_slave_0: entered promiscuous mode [ 2070.062415][T30101] bridge0: port 2(bridge_slave_1) entered blocking state [ 2070.069746][T30101] bridge0: port 2(bridge_slave_1) entered disabled state [ 2070.085514][T30101] bridge_slave_1: entered allmulticast mode [ 2070.100983][T30101] bridge_slave_1: entered promiscuous mode [ 2070.162074][T30101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2070.196899][T30101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2070.214929][T25742] Bluetooth: hci1: command tx timeout [ 2070.257071][T30101] team0: Port device team_slave_0 added [ 2070.266516][T30101] team0: Port device team_slave_1 added [ 2070.293686][T30101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2070.301173][T30101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2070.328539][T30101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2070.341790][T30101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2070.349587][T30101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2070.384159][T30101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2070.435734][T30101] hsr_slave_0: entered promiscuous mode [ 2070.442584][T30101] hsr_slave_1: entered promiscuous mode [ 2070.449935][T30101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2070.458641][T30101] Cannot create hsr debugfs directory [ 2071.123524][T30101] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2071.144755][T30101] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2071.164712][T30101] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2071.176533][T30101] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2071.318576][T30101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2071.362600][T30101] 8021q: adding VLAN 0 to HW filter on device team0 [ 2071.401203][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 2071.408419][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2071.437373][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 2071.444598][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2071.545278][T30101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2071.617005][T30101] veth0_vlan: entered promiscuous mode [ 2071.639363][T30101] veth1_vlan: entered promiscuous mode [ 2071.670830][T30101] veth0_macvtap: entered promiscuous mode [ 2071.699420][T30101] veth1_macvtap: entered promiscuous mode [ 2071.732270][T30101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2071.743252][T30101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2071.762686][T30101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2071.773545][T30101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2071.785797][T30101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2071.796889][T30101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2071.807129][T30101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2071.818279][T30101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2071.829844][T30101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2071.844099][T30101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2071.858392][T30101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2071.869716][T30101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2071.895824][T30101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2071.920450][T30101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2071.942011][T30101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2071.961027][T30101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2071.972381][T30101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2071.991277][T30101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2072.003407][T30101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.021801][T30101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2072.035552][T30101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.048015][T30101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2072.058710][T30101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.068606][T30101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2072.079732][T30101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2072.099553][T30101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2072.115602][T30101] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2072.125937][T30101] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2072.136795][T30101] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2072.147260][T30101] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2072.278757][ T2997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2072.307655][T25742] Bluetooth: hci1: command tx timeout [ 2072.319626][ T2997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2072.348459][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2072.370300][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2074.384007][T25742] Bluetooth: hci1: command tx timeout [ 2076.454282][T25742] Bluetooth: hci1: command tx timeout [ 2078.619257][ T1168] kworker/0:2 (1168) used greatest stack depth: 14032 bytes left [ 2099.096506][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.102888][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 2128.697590][ T2997] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2128.813483][ T2997] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2128.904346][ T2997] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2128.977971][ T2997] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2129.142170][ T2997] bridge_slave_1: left allmulticast mode [ 2129.148058][ T2997] bridge_slave_1: left promiscuous mode [ 2129.156418][ T2997] bridge0: port 2(bridge_slave_1) entered disabled state [ 2129.172483][ T2997] bridge_slave_0: left allmulticast mode [ 2129.179677][ T2997] bridge_slave_0: left promiscuous mode [ 2129.188447][ T2997] bridge0: port 1(bridge_slave_0) entered disabled state [ 2129.863146][ T2997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2129.876871][ T2997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2129.889175][ T2997] bond0 (unregistering): Released all slaves [ 2130.251840][T29939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2130.265486][T29939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2130.281699][T29939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2130.291362][T29939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2130.301764][T29939] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2130.309324][T29939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2130.383270][ T2997] hsr_slave_0: left promiscuous mode [ 2130.410941][ T2997] hsr_slave_1: left promiscuous mode [ 2130.417763][ T2997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2130.432840][ T2997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2130.449123][ T2997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2130.469119][ T2997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2130.493468][ T2997] veth1_macvtap: left promiscuous mode [ 2130.502838][ T2997] veth0_macvtap: left promiscuous mode [ 2130.509774][ T2997] veth1_vlan: left promiscuous mode [ 2130.515548][ T2997] veth0_vlan: left promiscuous mode [ 2131.230009][ T2997] team0 (unregistering): Port device team_slave_1 removed [ 2131.311400][ T2997] team0 (unregistering): Port device team_slave_0 removed [ 2132.368451][T30235] chnl_net:caif_netlink_parms(): no params data found [ 2132.376016][T25742] Bluetooth: hci1: command tx timeout [ 2132.475539][T30235] bridge0: port 1(bridge_slave_0) entered blocking state [ 2132.482791][T30235] bridge0: port 1(bridge_slave_0) entered disabled state [ 2132.500579][T30235] bridge_slave_0: entered allmulticast mode [ 2132.511069][T30235] bridge_slave_0: entered promiscuous mode [ 2132.527205][T30235] bridge0: port 2(bridge_slave_1) entered blocking state [ 2132.544914][T30235] bridge0: port 2(bridge_slave_1) entered disabled state [ 2132.552230][T30235] bridge_slave_1: entered allmulticast mode [ 2132.560534][T30235] bridge_slave_1: entered promiscuous mode [ 2132.612413][T30235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2132.625755][T30235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2132.663207][T30235] team0: Port device team_slave_0 added [ 2132.673548][T30235] team0: Port device team_slave_1 added [ 2132.703580][T30235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2132.711399][T30235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2132.742087][T30235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2132.763614][T30235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2132.771134][T30235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2132.801342][T30235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2132.896982][T30235] hsr_slave_0: entered promiscuous mode [ 2132.903500][T30235] hsr_slave_1: entered promiscuous mode [ 2132.914350][T30235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2132.921972][T30235] Cannot create hsr debugfs directory [ 2133.693573][T30235] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2133.710653][T30235] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2133.727312][T30235] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2133.748362][T30235] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2133.891630][T30235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2133.916589][T30235] 8021q: adding VLAN 0 to HW filter on device team0 [ 2133.937127][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2133.944281][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2133.962804][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 2133.969972][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2134.070551][T30235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2134.131666][T30235] veth0_vlan: entered promiscuous mode [ 2134.162112][T30235] veth1_vlan: entered promiscuous mode [ 2134.237878][T30235] veth0_macvtap: entered promiscuous mode [ 2134.260515][T30235] veth1_macvtap: entered promiscuous mode [ 2134.298939][T30235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2134.322269][T30235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2134.332810][T30235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2134.353076][T30235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2134.363446][T30235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2134.374950][T30235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2134.385306][T30235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2134.404033][T30235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2134.414643][T30235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2134.425854][T30235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2134.436578][T30235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2134.447389][T30235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2134.453987][T25742] Bluetooth: hci1: command tx timeout [ 2134.459966][T30235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2134.486479][T30235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2134.502145][T30235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2134.520341][T30235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2134.531085][T30235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2134.541481][T30235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2134.552439][T30235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2134.562966][T30235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2134.574648][T30235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2134.584588][T30235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2134.595451][T30235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2134.605782][T30235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2134.617397][T30235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2134.629215][T30235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2134.642555][T30235] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2134.653055][T30235] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2134.662418][T30235] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2134.672407][T30235] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2134.793338][T19432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2134.817938][T19432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2134.852221][T19432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2134.874194][T19432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2136.533995][T25742] Bluetooth: hci1: command tx timeout [ 2138.613890][T25742] Bluetooth: hci1: command tx timeout [ 2150.294752][ T30] INFO: task kworker/1:3:28095 blocked for more than 143 seconds. [ 2150.303027][ T30] Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 2150.310952][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2150.320001][ T30] task:kworker/1:3 state:D stack:23448 pid:28095 tgid:28095 ppid:2 flags:0x00004000 [ 2150.330308][ T30] Workqueue: usb_hub_wq hub_event [ 2150.335463][ T30] Call Trace: [ 2150.338794][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2150.341771][ T30] __schedule+0x1895/0x4b30 [ 2150.346786][ T30] ? __pfx___schedule+0x10/0x10 [ 2150.351709][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2150.357805][ T30] ? __pfx_lock_release+0x10/0x10 [ 2150.366305][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2150.371589][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 2150.377442][ T30] ? schedule+0x90/0x320 [ 2150.381751][ T30] schedule+0x14b/0x320 [ 2150.386010][ T30] usb_poison_urb+0x1bc/0x2e0 [ 2150.390838][ T30] ? __pfx_usb_poison_urb+0x10/0x10 [ 2150.396132][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2150.402361][ T30] yurex_disconnect+0xc6/0x190 [ 2150.407551][ T30] usb_unbind_interface+0x25e/0x940 [ 2150.499304][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 2150.536971][ T30] ? __pfx_usb_unbind_interface+0x10/0x10 [ 2150.542796][ T30] device_release_driver_internal+0x503/0x7c0 [ 2150.563756][ T30] bus_remove_device+0x34f/0x420 [ 2150.569462][ T30] device_del+0x57a/0x9b0 [ 2150.584094][ T30] ? kobject_put+0x272/0x480 [ 2150.588788][ T30] ? __pfx_device_del+0x10/0x10 [ 2150.603761][ T30] ? kobject_put+0x44d/0x480 [ 2150.608887][ T30] usb_disable_device+0x3bf/0x850 [ 2150.623761][ T30] usb_disconnect+0x340/0x950 [ 2150.628623][ T30] hub_event+0x1ebc/0x5150 [ 2150.633116][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 2150.653788][ T30] ? __pfx_hub_event+0x10/0x10 [ 2150.658656][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 2150.674021][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2150.680105][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2150.704073][ T30] ? process_scheduled_works+0x976/0x1850 [ 2150.709898][ T30] process_scheduled_works+0xa63/0x1850 [ 2150.723783][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 2150.729931][ T30] ? assign_work+0x364/0x3d0 [ 2150.741605][ T30] worker_thread+0x870/0xd30 [ 2150.754905][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2150.760901][ T30] ? __kthread_parkme+0x169/0x1d0 [ 2150.791924][ T30] ? __pfx_worker_thread+0x10/0x10 [ 2150.797971][ T30] kthread+0x2f0/0x390 [ 2150.802098][ T30] ? __pfx_worker_thread+0x10/0x10 [ 2150.816907][ T30] ? __pfx_kthread+0x10/0x10 [ 2150.821576][ T30] ret_from_fork+0x4b/0x80 [ 2150.853750][ T30] ? __pfx_kthread+0x10/0x10 [ 2150.858444][ T30] ret_from_fork_asm+0x1a/0x30 [ 2150.863289][ T30] [ 2150.885768][ T30] INFO: task syz.1.3610:28253 blocked for more than 143 seconds. [ 2150.894716][ T30] Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 2150.902393][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2150.911464][ T30] task:syz.1.3610 state:D stack:27392 pid:28253 tgid:28244 ppid:27944 flags:0x00004004 [ 2150.922672][ T30] Call Trace: [ 2150.926283][ T30] [ 2150.929259][ T30] __schedule+0x1895/0x4b30 [ 2150.934128][ T30] ? __pfx___schedule+0x10/0x10 [ 2150.939056][ T30] ? __pfx_lock_release+0x10/0x10 [ 2150.944409][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2150.950333][ T30] ? kobject_put+0x446/0x480 [ 2150.955017][ T30] ? schedule+0x90/0x320 [ 2150.959317][ T30] schedule+0x14b/0x320 [ 2150.963522][ T30] usb_kill_urb+0x1c9/0x300 [ 2150.968143][ T30] ? __pfx_usb_kill_urb+0x10/0x10 [ 2150.973219][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2150.980243][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2150.986753][ T30] ? finish_wait+0xd4/0x1e0 [ 2150.991320][ T30] yurex_write+0x81c/0xc40 [ 2150.995858][ T30] ? __pfx_yurex_write+0x10/0x10 [ 2151.000839][ T30] ? end_current_label_crit_section+0x151/0x180 [ 2151.007459][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2151.013617][ T30] ? bpf_lsm_file_permission+0x9/0x10 [ 2151.019189][ T30] ? security_file_permission+0x74/0x280 [ 2151.025128][ T30] ? rw_verify_area+0x1c3/0x6f0 [ 2151.030035][ T30] ? __pfx_yurex_write+0x10/0x10 [ 2151.035439][ T30] vfs_write+0x29c/0xc90 [ 2151.039742][ T30] ? __pfx_vfs_write+0x10/0x10 [ 2151.044651][ T30] ? __fget_files+0x29/0x470 [ 2151.049294][ T30] ? __fget_files+0x3f3/0x470 [ 2151.054110][ T30] ? __fget_files+0x29/0x470 [ 2151.058808][ T30] ? fdget_pos+0x19a/0x320 [ 2151.063241][ T30] ksys_write+0x183/0x2b0 [ 2151.067951][ T30] ? __pfx_ksys_write+0x10/0x10 [ 2151.072931][ T30] ? do_syscall_64+0x100/0x230 [ 2151.078484][ T30] ? do_syscall_64+0xb6/0x230 [ 2151.083212][ T30] do_syscall_64+0xf3/0x230 [ 2151.087865][ T30] ? clear_bhb_loop+0x35/0x90 [ 2151.092581][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2151.099158][ T30] RIP: 0033:0x7feb4117dff9 [ 2151.103596][ T30] RSP: 002b:00007feb4201c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2151.112135][ T30] RAX: ffffffffffffffda RBX: 00007feb41336058 RCX: 00007feb4117dff9 [ 2151.120296][ T30] RDX: 0000000000000001 RSI: 0000000020000200 RDI: 0000000000000005 [ 2151.128680][ T30] RBP: 00007feb411f0296 R08: 0000000000000000 R09: 0000000000000000 [ 2151.136870][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2151.144985][ T30] R13: 0000000000000000 R14: 00007feb41336058 R15: 00007feb4145fa28 [ 2151.153006][ T30] [ 2151.156447][ T30] [ 2151.156447][ T30] Showing all locks held in the system: [ 2151.273432][ T30] 1 lock held by khungtaskd/30: [ 2151.278724][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 2151.289248][ T30] 3 locks held by kworker/u8:7/2920: [ 2151.294963][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 2151.307089][ T30] #1: ffffc90009b9fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 2151.318269][ T30] #2: ffffffff8fcd2cc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 2151.327416][ T30] 2 locks held by kworker/u8:8/2997: [ 2151.332738][ T30] #0: ffff8880b863ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 2151.343471][ T30] #1: ffffe8ffffc7f648 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x17c/0x7a0 [ 2151.355077][ T30] 2 locks held by getty/4985: [ 2151.359814][ T30] #0: ffff88802e6030a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2151.370010][ T30] #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 2151.380470][ T30] 3 locks held by kworker/0:4/5237: [ 2151.386463][ T30] 3 locks held by kworker/1:4/5285: [ 2151.391714][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 2151.403891][ T30] #1: ffffc90003fffd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 2151.414488][ T30] #2: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 2151.426005][ T30] 5 locks held by kworker/u8:2/19432: [ 2151.431716][ T30] 1 lock held by syz-executor/27747: [ 2151.437080][ T30] #0: ffffffff8fcd2cc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 2151.446214][ T30] 5 locks held by kworker/1:3/28095: [ 2151.451549][ T30] #0: ffff88801c2a4548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 2151.463357][ T30] #1: ffffc90003667d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 2151.475367][ T30] #2: ffff888028407190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 2151.484734][ T30] #3: ffff888027b43190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x103/0x950 [ 2151.494636][ T30] #4: ffff888052569160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 2151.505692][ T30] 1 lock held by syz.1.3610/28253: [ 2151.510857][ T30] #0: ffff88805d6a18b0 (&dev->io_mutex){+.+.}-{3:3}, at: yurex_write+0x1dc/0xc40 [ 2151.520632][ T30] 2 locks held by syz-executor/28312: [ 2151.526094][ T30] #0: ffff88806fc48d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 2151.536247][ T30] #1: ffff88806fc48078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 2151.546385][ T30] 1 lock held by syz-executor/28316: [ 2151.551709][ T30] #0: ffffffff8fcd2cc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 2151.560826][ T30] 3 locks held by syz-executor/28795: [ 2151.566289][ T30] #0: ffff88805a5acd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 2151.576922][ T30] #1: ffff88805a5ac078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 2151.586744][ T30] #2: ffffffff8fe3f5e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 2151.597389][ T30] 1 lock held by syz-executor/29466: [ 2151.602723][ T30] #0: ffffffff8fcd2cc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 2151.612257][ T30] [ 2151.615135][ T30] ============================================= [ 2151.615135][ T30] [ 2151.623595][ T30] NMI backtrace for cpu 1 [ 2151.627952][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 2151.638486][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2151.648561][ T30] Call Trace: [ 2151.651859][ T30] [ 2151.654806][ T30] dump_stack_lvl+0x241/0x360 [ 2151.659519][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2151.664738][ T30] ? __pfx__printk+0x10/0x10 [ 2151.669358][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 2151.674342][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2151.679843][ T30] ? _printk+0xd5/0x120 [ 2151.684066][ T30] ? __pfx__printk+0x10/0x10 [ 2151.688706][ T30] ? __wake_up_klogd+0xcc/0x110 [ 2151.693588][ T30] ? __pfx__printk+0x10/0x10 [ 2151.698207][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 2151.703262][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2151.709263][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 2151.715271][ T30] watchdog+0xff4/0x1040 [ 2151.719540][ T30] ? watchdog+0x1ea/0x1040 [ 2151.723992][ T30] ? __pfx_watchdog+0x10/0x10 [ 2151.728701][ T30] kthread+0x2f0/0x390 [ 2151.732789][ T30] ? __pfx_watchdog+0x10/0x10 [ 2151.737513][ T30] ? __pfx_kthread+0x10/0x10 [ 2151.742157][ T30] ret_from_fork+0x4b/0x80 [ 2151.746625][ T30] ? __pfx_kthread+0x10/0x10 [ 2151.751241][ T30] ret_from_fork_asm+0x1a/0x30 [ 2151.756042][ T30] [ 2151.760177][ T30] Sending NMI from CPU 1 to CPUs 0: [ 2151.765774][ C0] NMI backtrace for cpu 0 [ 2151.765788][ C0] CPU: 0 UID: 0 PID: 5237 Comm: kworker/0:4 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 2151.765811][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2151.765824][ C0] Workqueue: events drain_vmap_area_work [ 2151.765852][ C0] RIP: 0010:lock_acquire+0x24b/0x550 [ 2151.765883][ C0] Code: 4c 89 f7 e8 07 44 8e 00 48 c7 44 24 60 00 00 00 00 9c 8f 44 24 60 42 80 3c 2b 00 74 08 4c 89 f7 e8 fa 42 8e 00 f6 44 24 61 02 <0f> 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e [ 2151.765900][ C0] RSP: 0018:ffffc90003dff640 EFLAGS: 00000046 [ 2151.765917][ C0] RAX: 0000000000000001 RBX: 1ffff920007bfed4 RCX: 9db152c60a411f00 [ 2151.765932][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0adc40 RDI: ffffffff8c610120 [ 2151.765946][ C0] RBP: ffffc90003dff790 R08: ffffffff942c9807 R09: 1ffffffff2859300 [ 2151.765961][ C0] R10: dffffc0000000000 R11: fffffbfff2859301 R12: 1ffff920007bfed0 [ 2151.765976][ C0] R13: dffffc0000000000 R14: ffffc90003dff6a0 R15: 0000000000000246 [ 2151.765991][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 2151.766007][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2151.766021][ C0] CR2: 00007ffe11c2e9a8 CR3: 000000000e734000 CR4: 00000000003526f0 [ 2151.766038][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2151.766050][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2151.766062][ C0] Call Trace: [ 2151.766070][ C0] [ 2151.766077][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 2151.766102][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 2151.766139][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2151.766162][ C0] ? nmi_handle+0x2a/0x5a0 [ 2151.766189][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2151.766214][ C0] ? nmi_handle+0x14f/0x5a0 [ 2151.766234][ C0] ? nmi_handle+0x2a/0x5a0 [ 2151.766253][ C0] ? lock_acquire+0x24b/0x550 [ 2151.766280][ C0] ? default_do_nmi+0x63/0x160 [ 2151.766304][ C0] ? exc_nmi+0x123/0x1f0 [ 2151.766327][ C0] ? end_repeat_nmi+0xf/0x53 [ 2151.766351][ C0] ? lock_acquire+0x24b/0x550 [ 2151.766379][ C0] ? lock_acquire+0x24b/0x550 [ 2151.766406][ C0] ? lock_acquire+0x24b/0x550 [ 2151.766433][ C0] [ 2151.766439][ C0] [ 2151.766450][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 2151.766476][ C0] ? page_ext_put+0x97/0xc0 [ 2151.766499][ C0] ? do_raw_spin_trylock+0xc8/0x1f0 [ 2151.766523][ C0] ? __pfx_do_raw_spin_trylock+0x10/0x10 [ 2151.766547][ C0] ? page_ext_get+0x20/0x2a0 [ 2151.766567][ C0] ? page_ext_get+0x1d6/0x2a0 [ 2151.766589][ C0] _raw_spin_trylock+0x46/0x80 [ 2151.766615][ C0] ? free_unref_page+0x67f/0xf20 [ 2151.766643][ C0] free_unref_page+0x67f/0xf20 [ 2151.766675][ C0] kasan_depopulate_vmalloc_pte+0x74/0x90 [ 2151.766695][ C0] __apply_to_page_range+0x806/0xde0 [ 2151.766724][ C0] ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 2151.766746][ C0] ? __pfx___apply_to_page_range+0x10/0x10 [ 2151.766773][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 2151.766792][ C0] ? on_each_cpu_cond_mask+0x59/0x80 [ 2151.766811][ C0] ? on_each_cpu_cond_mask+0x74/0x80 [ 2151.766831][ C0] kasan_release_vmalloc+0x9a/0xb0 [ 2151.766849][ C0] purge_vmap_node+0x417/0x810 [ 2151.766877][ C0] ? __pfx_purge_vmap_node+0x10/0x10 [ 2151.766899][ C0] ? on_each_cpu_cond_mask+0x74/0x80 [ 2151.766920][ C0] __purge_vmap_area_lazy+0x708/0xae0 [ 2151.766944][ C0] ? process_scheduled_works+0x976/0x1850 [ 2151.766971][ C0] drain_vmap_area_work+0x27/0x40 [ 2151.766990][ C0] process_scheduled_works+0xa63/0x1850 [ 2151.767029][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 2151.767058][ C0] ? assign_work+0x364/0x3d0 [ 2151.767085][ C0] worker_thread+0x870/0xd30 [ 2151.767124][ C0] ? __kthread_parkme+0x169/0x1d0 [ 2151.767152][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2151.767178][ C0] kthread+0x2f0/0x390 [ 2151.767195][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2151.767221][ C0] ? __pfx_kthread+0x10/0x10 [ 2151.767239][ C0] ret_from_fork+0x4b/0x80 [ 2151.767265][ C0] ? __pfx_kthread+0x10/0x10 [ 2151.767283][ C0] ret_from_fork_asm+0x1a/0x30 [ 2151.767315][ C0] [ 2151.767779][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2152.175349][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 2152.185876][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2152.195951][ T30] Call Trace: [ 2152.199278][ T30] [ 2152.202225][ T30] dump_stack_lvl+0x241/0x360 [ 2152.206939][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2152.212165][ T30] ? __pfx__printk+0x10/0x10 [ 2152.216776][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2152.222795][ T30] ? vscnprintf+0x5d/0x90 [ 2152.227150][ T30] panic+0x349/0x880 [ 2152.231065][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2152.237244][ T30] ? __pfx_panic+0x10/0x10 [ 2152.241675][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 2152.247153][ T30] ? __irq_work_queue_local+0x137/0x410 [ 2152.252725][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2152.258114][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2152.264291][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 2152.270541][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 2152.276763][ T30] watchdog+0x1033/0x1040 [ 2152.281129][ T30] ? watchdog+0x1ea/0x1040 [ 2152.285582][ T30] ? __pfx_watchdog+0x10/0x10 [ 2152.290288][ T30] kthread+0x2f0/0x390 [ 2152.294386][ T30] ? __pfx_watchdog+0x10/0x10 [ 2152.299093][ T30] ? __pfx_kthread+0x10/0x10 [ 2152.303708][ T30] ret_from_fork+0x4b/0x80 [ 2152.308161][ T30] ? __pfx_kthread+0x10/0x10 [ 2152.312770][ T30] ret_from_fork_asm+0x1a/0x30 [ 2152.318001][ T30] [ 2152.321329][ T30] Kernel Offset: disabled [ 2152.325665][ T30] Rebooting in 86400 seconds..