last executing test programs: 6.220724118s ago: executing program 0 (id=839): socket$inet6_tcp(0xa, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, 0x0, 0x240088d0) r1 = syz_io_uring_setup(0xbdd, &(0x7f00000000c0)={0x0, 0xfbe6, 0x8, 0x1, 0x40000333}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x4}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 6.011965735s ago: executing program 0 (id=841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xffffe10e}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.839404159s ago: executing program 0 (id=842): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x0, {0xa, 0x4e21, 0x1200, @local, 0xa}}, 0x80, 0x0, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socket$kcm(0x11, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e"], 0xffdd) 5.433559912s ago: executing program 0 (id=845): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') r2 = socket(0x18, 0x3, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vlan0\x00'}}, 0x1e) sendfile(r2, r1, 0x0, 0x8) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e"], 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0285628, &(0x7f0000000040)={0x403, 0x1}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$FBIOPUT_CON2FBMAP(r3, 0x4610, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = shmget(0x2, 0x10000, 0x8, &(0x7f00006a0000/0x10000)=nil) shmctl$IPC_INFO(r5, 0x3, &(0x7f0000000100)=""/23) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1e4}}, 0x0) write$binfmt_misc(r6, 0x0, 0x0) r7 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xd3b0, 0x0, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4.274561275s ago: executing program 1 (id=856): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x1, {0x1, 0xff, 0x7}, 0x83}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000280)={0x1d, r4, 0x20000000004, {0x0, 0xff}}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x1, {0x0, 0xf0, 0x3}}, 0x18, &(0x7f0000000180)={0x0}}, 0xee) 4.184090692s ago: executing program 1 (id=857): mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000071, 0x0, 0xffffffffffffff00}]}) 4.136775926s ago: executing program 1 (id=858): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblc\x00', 0x0, 0xfffffffd, 0x33}, 0x2c) 4.065948652s ago: executing program 1 (id=859): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) 3.95602003s ago: executing program 1 (id=861): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) llistxattr(0x0, 0x0, 0x0) 3.603966659s ago: executing program 4 (id=865): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) openat$kvm(0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x2e15, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x1, 0x1be}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) close_range(r1, 0xffffffffffffffff, 0x0) 3.575534951s ago: executing program 0 (id=866): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x1, 0x8000, 0x3, &(0x7f0000000100)="461462"}], 0x1}) 3.544769094s ago: executing program 3 (id=867): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xffffe10e}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.71959314s ago: executing program 4 (id=870): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x0, {0xa, 0x4e21, 0x1200, @local, 0xa}}, 0x80, 0x0, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socket$kcm(0x11, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e"], 0xffdd) 2.652390256s ago: executing program 1 (id=871): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd2(0x8, 0x80000) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)={0x6}) r5 = eventfd2(0xfffffffb, 0x80800) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000140)={r4, 0x6, 0x2, r5}) syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0x101001a, &(0x7f0000000480)=ANY=[], 0xfb, 0x0, 0x0) read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="746172676574205043493a5b89d9f46ac070df4e3164"], 0x14) syz_usb_disconnect(0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000300)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) getpeername(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) close_range(r5, 0xffffffffffffffff, 0x0) 2.647801356s ago: executing program 3 (id=872): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000180)="d2cf4071eedf8b7b757ad2e20539519ec6afbc26", 0x14}, {&(0x7f0000000540)="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", 0x22d}], 0x2}}], 0x1, 0x4000001) r1 = dup(r0) read$FUSE(r1, 0x0, 0x0) 2.533876545s ago: executing program 4 (id=873): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/176) 2.47990381s ago: executing program 3 (id=874): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x6, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x30b1d695, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001340)="0e9849f1"}) 2.321913262s ago: executing program 3 (id=875): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.021635236s ago: executing program 3 (id=876): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) r5 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0) r7 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) write$snddsp(r7, &(0x7f0000000200)="a38d", 0x2) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000400)={0xa3, 0x0, &(0x7f0000000280)}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r7, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r7, 0x40084146, &(0x7f00000003c0)=0x2) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r10 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r10, 0x1, &(0x7f0000000000)={0x210a, r9}, 0x0) landlock_restrict_self(r10, 0x0) landlock_restrict_self(r10, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400", @ANYRES16=0x0, @ANYBLOB="10002b12796fbd7000bbdbdf250f4077f9a1c155acb2000000000079f981cb24cc1aef32ad6755ee97578f3875db3714aee8e8208a9acdd6bc79237a3d6fc91f071931b2bcb5b586229ab6552d366e4e495b"], 0x14}}, 0x20004050) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x40}], 0x1, 0x11, 0x0, 0x0) 1.8559682s ago: executing program 2 (id=877): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x2cf92000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000003c0)=0x560, 0x4) 1.85155008s ago: executing program 2 (id=878): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, 0x0) connect$inet6(r0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xfffd, 0x4ce, 0x0, 0x9dff, 0x3, "0007edeb00cbe600"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000001100)=0x7) 881.078569ms ago: executing program 4 (id=879): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 877.347499ms ago: executing program 2 (id=880): r0 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$sock_int(r0, 0x1, 0x2e, 0x0, &(0x7f0000000040)) 704.004222ms ago: executing program 2 (id=881): socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) 693.249004ms ago: executing program 4 (id=882): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xffffe10e}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 535.219726ms ago: executing program 2 (id=883): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{&(0x7f0000000a40)={0xa, 0x4e21, 0xffffff80, @empty, 0x4}, 0x1c, 0x0}}], 0x57, 0x4001c40) 372.024039ms ago: executing program 2 (id=884): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x0, {0xa, 0x4e21, 0x1200, @local, 0xa}}, 0x80, 0x0, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socket$kcm(0x11, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e"], 0xffdd) 361.035781ms ago: executing program 4 (id=885): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x1, 0x8080000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000740)={0x13, 0x10, 0xfa00, {&(0x7f0000000540), r3}}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[], 0x1c0}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004050) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x1000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_ATTACH_FILTER(r4, 0x29, 0x1a, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES32], 0x20) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r5, 0xa, 0x13) fcntl$setlease(r5, 0x400, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r5, 0x4068aea3, &(0x7f00000002c0)) 172.296386ms ago: executing program 0 (id=886): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 3 (id=887): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, 0x0) kernel console output (not intermixed with test programs): red promiscuous mode [ 52.519052][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.538337][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.545529][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.553684][ T4183] device bridge_slave_1 entered promiscuous mode [ 52.564281][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.614150][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.621670][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.630013][ T4181] device bridge_slave_0 entered promiscuous mode [ 52.645981][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.660090][ T4188] team0: Port device team_slave_0 added [ 52.666363][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.673734][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.681977][ T4181] device bridge_slave_1 entered promiscuous mode [ 52.688918][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.695990][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.704494][ T4182] device bridge_slave_0 entered promiscuous mode [ 52.713367][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.738241][ T4188] team0: Port device team_slave_1 added [ 52.757748][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.765066][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.773379][ T4182] device bridge_slave_1 entered promiscuous mode [ 52.815652][ T4183] team0: Port device team_slave_0 added [ 52.821839][ T4180] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.829143][ T4180] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.836785][ T4180] device bridge_slave_0 entered promiscuous mode [ 52.845432][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.852582][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.878701][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.891935][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.909870][ T4183] team0: Port device team_slave_1 added [ 52.917136][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.926740][ T4180] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.934012][ T4180] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.941826][ T4180] device bridge_slave_1 entered promiscuous mode [ 52.949233][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.956172][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.982229][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.995089][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.012672][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.044172][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.051171][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.077435][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.104127][ T4180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.122586][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.129615][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.156054][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.175458][ T4180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.193578][ T4181] team0: Port device team_slave_0 added [ 53.209741][ T4182] team0: Port device team_slave_0 added [ 53.231261][ T4181] team0: Port device team_slave_1 added [ 53.239677][ T4180] team0: Port device team_slave_0 added [ 53.247330][ T4180] team0: Port device team_slave_1 added [ 53.254261][ T4182] team0: Port device team_slave_1 added [ 53.298636][ T4188] device hsr_slave_0 entered promiscuous mode [ 53.305281][ T4188] device hsr_slave_1 entered promiscuous mode [ 53.317134][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.324485][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.350458][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.381646][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.388604][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.414707][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.427488][ T4183] device hsr_slave_0 entered promiscuous mode [ 53.434657][ T4183] device hsr_slave_1 entered promiscuous mode [ 53.441402][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.449367][ T4183] Cannot create hsr debugfs directory [ 53.455249][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.462269][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.488202][ T4180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.499796][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.506741][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.532728][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.565198][ T4180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.572243][ T4180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.598614][ T4180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.610107][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.617050][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.643226][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.725019][ T4181] device hsr_slave_0 entered promiscuous mode [ 53.731890][ T4181] device hsr_slave_1 entered promiscuous mode [ 53.738509][ T4181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.746180][ T4181] Cannot create hsr debugfs directory [ 53.773379][ T4180] device hsr_slave_0 entered promiscuous mode [ 53.780481][ T4180] device hsr_slave_1 entered promiscuous mode [ 53.787172][ T4180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.794876][ T4180] Cannot create hsr debugfs directory [ 53.838035][ T4182] device hsr_slave_0 entered promiscuous mode [ 53.844894][ T4182] device hsr_slave_1 entered promiscuous mode [ 53.851681][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.859405][ T4182] Cannot create hsr debugfs directory [ 53.955879][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 53.962735][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 53.968909][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 53.975124][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 53.981920][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 54.090681][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.107142][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.116256][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.128937][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.167640][ T4183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.188658][ T4183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.198504][ T4183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.208540][ T4183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.242464][ T4181] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.270088][ T4181] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.297076][ T4181] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.308463][ T4181] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.364256][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.381137][ T4180] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.392964][ T4180] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.402209][ T4180] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.412298][ T4180] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.444882][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.456039][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.466685][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.503186][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.513835][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.522920][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.532672][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.540000][ T418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.561475][ T4182] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.579699][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.586650][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.595427][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.603807][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.612633][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.621419][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.630921][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.637975][ T418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.662833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.672585][ T4182] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.683273][ T4182] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.696884][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.712022][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.722807][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.733833][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.742608][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.749810][ T418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.758123][ T4182] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.770514][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.784042][ T4180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.796141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.809211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.817809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.828692][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.836520][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.857153][ T4180] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.865149][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.874159][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.883236][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.892713][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.902777][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.910184][ T418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.917933][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.926300][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.934159][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.956250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.966424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.974899][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.981960][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.991441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.000428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.009419][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.016463][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.024550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.034832][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.053624][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.062034][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.071891][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.082142][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.090905][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.101086][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.121770][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.137695][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.146877][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.156672][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.165578][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.174726][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.184952][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.193832][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.204468][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.212400][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.223832][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.234038][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.244246][ T4224] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.251380][ T4224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.267948][ T4180] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.278864][ T4180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.299198][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.307045][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.323264][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.335319][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.346783][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.362244][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.371095][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.380866][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.390267][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.398651][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.407622][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.417383][ T4224] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.424477][ T4224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.432673][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.447108][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.458218][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.481194][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.491307][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.504694][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.526733][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.550433][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.571389][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.582545][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.613634][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.630583][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.642175][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.651630][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.660501][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.668680][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.677214][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.685912][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.693700][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.704008][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.727676][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.764612][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.794159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.803459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.819874][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.841268][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.861817][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.868951][ T4278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.882952][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.892391][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.901854][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.908946][ T4278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.917051][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.933122][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.943362][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.988568][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.005903][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.019417][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.026902][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.035542][ T1324] Bluetooth: hci4: command 0x041b tx timeout [ 56.042119][ T1324] Bluetooth: hci1: command 0x041b tx timeout [ 56.048202][ T1324] Bluetooth: hci2: command 0x041b tx timeout [ 56.051695][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.062300][ T1324] Bluetooth: hci0: command 0x041b tx timeout [ 56.065467][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.068365][ T1324] Bluetooth: hci3: command 0x041b tx timeout [ 56.077461][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.091618][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.100160][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.108309][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.116176][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.123952][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.142140][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.150830][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.161450][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.180142][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.189767][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.205515][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.213945][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.243709][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.256252][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.264252][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.274700][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.295359][ T4188] device veth0_vlan entered promiscuous mode [ 56.321555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.336088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.345071][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.354226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.363114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.371124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.379295][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.386936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.400071][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.409597][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.423659][ T4188] device veth1_vlan entered promiscuous mode [ 56.448306][ T4180] device veth0_vlan entered promiscuous mode [ 56.469241][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.478384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.494239][ T4183] device veth0_vlan entered promiscuous mode [ 56.514431][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.524497][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.534345][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.543908][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.556376][ T4180] device veth1_vlan entered promiscuous mode [ 56.572685][ T4181] device veth0_vlan entered promiscuous mode [ 56.585319][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.594396][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.602986][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.612175][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.620868][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.628670][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.640590][ T4188] device veth0_macvtap entered promiscuous mode [ 56.652545][ T4183] device veth1_vlan entered promiscuous mode [ 56.665929][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.675155][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.683944][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.692196][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.705237][ T4188] device veth1_macvtap entered promiscuous mode [ 56.723808][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.742360][ T4181] device veth1_vlan entered promiscuous mode [ 56.771207][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.780991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.789766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.797932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.806085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.814711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.824134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.832902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.841880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.850909][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.874079][ T4183] device veth0_macvtap entered promiscuous mode [ 56.884660][ T4183] device veth1_macvtap entered promiscuous mode [ 56.893802][ T4180] device veth0_macvtap entered promiscuous mode [ 56.911560][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.920541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.930606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.938567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.947305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.956296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.969353][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.980342][ T4180] device veth1_macvtap entered promiscuous mode [ 57.001127][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.011788][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.021164][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.037718][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.046842][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.056535][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.065540][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.092801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.102965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.111544][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.122348][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.130676][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.138460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.147757][ T4182] device veth0_vlan entered promiscuous mode [ 57.164643][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.176654][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.188458][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.202502][ T4181] device veth0_macvtap entered promiscuous mode [ 57.214073][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.225084][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.235608][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.246213][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.257246][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.277887][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.286864][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.295969][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.304957][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.314418][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.325781][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.338664][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.351247][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.360521][ T4182] device veth1_vlan entered promiscuous mode [ 57.368145][ T4181] device veth1_macvtap entered promiscuous mode [ 57.378342][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.389013][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.399363][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.410076][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.421480][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.435883][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.445316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.457476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.466843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.479356][ T4180] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.488065][ T4180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.498174][ T4180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.507181][ T4180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.527611][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.539435][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.549959][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.562181][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.572531][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.588277][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.599734][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.617248][ T4183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.627451][ T4183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.636443][ T4183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.645925][ T4183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.679073][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.687800][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.696716][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.706606][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.718070][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.730474][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.740473][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.751784][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.761845][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.772406][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.783414][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.811688][ T4182] device veth0_macvtap entered promiscuous mode [ 57.827316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.835640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.845138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.856191][ T4181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.865670][ T4181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.875386][ T4181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.884384][ T4181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.918640][ T4182] device veth1_macvtap entered promiscuous mode [ 57.991106][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.002125][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.012451][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.023189][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.036866][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.047481][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.057722][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.068291][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.081075][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.092065][ T4278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.100639][ T4278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.107670][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.125383][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.130814][ T4225] Bluetooth: hci3: command 0x040f tx timeout [ 58.142817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.152105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.155286][ T4225] Bluetooth: hci0: command 0x040f tx timeout [ 58.166553][ T4225] Bluetooth: hci2: command 0x040f tx timeout [ 58.166843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.172968][ T4225] Bluetooth: hci1: command 0x040f tx timeout [ 58.186914][ T4225] Bluetooth: hci4: command 0x040f tx timeout [ 58.187034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.203701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.216129][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.227224][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.237256][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.247713][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.257708][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.268212][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.278621][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.289498][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.302546][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.323108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.332617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.344970][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.355771][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.364746][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.374534][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.392422][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.397974][ T4224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.406020][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.409685][ T4224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.420010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.459974][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.467511][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.467892][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.498471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.502213][ T4224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.551603][ T4224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.584352][ T4278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.595793][ T4278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.605392][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.615865][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.656582][ T4224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.695847][ T4224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.723016][ T4278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.733098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.771716][ T4278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.809442][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.819070][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.827034][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.885378][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.992947][ T4310] Zero length message leads to an empty skb [ 59.009674][ T4313] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 59.098953][ T4225] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 59.398909][ T4225] usb 3-1: Using ep0 maxpacket: 32 [ 59.449079][ T4247] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.519048][ T4225] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 59.583363][ T4225] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.595443][ T4225] usb 3-1: config 0 has no interface number 0 [ 59.604107][ T4225] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 59.769041][ T4225] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 59.788601][ T4225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.828575][ T4225] usb 3-1: Product: syz [ 59.854221][ T4225] usb 3-1: Manufacturer: syz [ 59.877904][ T4225] usb 3-1: SerialNumber: syz [ 59.889057][ T4247] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 59.920592][ T4225] usb 3-1: config 0 descriptor?? [ 59.929331][ T4247] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 59.958642][ T4247] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 59.974409][ T4225] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 60.007346][ T4225] radio-si470x: probe of 3-1:0.35 failed with error -5 [ 60.024659][ T4247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.129238][ T4299] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 60.178903][ T4225] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 60.194148][ T4247] Bluetooth: hci1: command 0x0419 tx timeout [ 60.201105][ T4247] Bluetooth: hci2: command 0x0419 tx timeout [ 60.223019][ T4247] Bluetooth: hci0: command 0x0419 tx timeout [ 60.243176][ T4247] Bluetooth: hci3: command 0x0419 tx timeout [ 60.270473][ T4247] Bluetooth: hci4: command 0x0419 tx timeout [ 60.419895][ T4299] usb 4-1: Using ep0 maxpacket: 8 [ 60.507015][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 60.527442][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.550060][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.570880][ T4302] device bridge_slave_0 left promiscuous mode [ 60.573905][ T4299] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 60.590689][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.609411][ T4299] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 60.637393][ T4299] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 60.661904][ T4299] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 60.686468][ T4299] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.715260][ T4299] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 60.745864][ T4299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.835509][ T4302] device bridge_slave_1 left promiscuous mode [ 60.843498][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.864090][ T4302] bond0: (slave bond_slave_0): Releasing backup interface [ 60.886013][ T4302] bond0: (slave bond_slave_1): Releasing backup interface [ 60.936921][ T4302] team0: Port device team_slave_0 removed [ 60.964913][ T4302] team0: Port device team_slave_1 removed [ 60.975886][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.988016][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.005298][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.018250][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.028904][ T4299] usb 4-1: GET_CAPABILITIES returned 0 [ 61.035002][ T4299] usbtmc 4-1:16.0: can't read capabilities [ 61.237994][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 61.320665][ T4299] usb 4-1: USB disconnect, device number 2 [ 61.834495][ T26] audit: type=1326 audit(1754881198.559:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4334 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919bd5dbe9 code=0x7ffc0000 [ 61.893504][ T26] audit: type=1326 audit(1754881198.569:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4334 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f919bd5dbe9 code=0x7ffc0000 [ 61.937449][ T26] audit: type=1326 audit(1754881198.569:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4334 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919bd5dbe9 code=0x7ffc0000 [ 61.955185][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 62.003797][ T26] audit: type=1326 audit(1754881198.569:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4334 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f919bd5dbe9 code=0x7ffc0000 [ 62.085650][ T26] audit: type=1326 audit(1754881198.569:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4334 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919bd5dbe9 code=0x7ffc0000 [ 62.174091][ T4302] syz.2.3 (4302) used greatest stack depth: 21056 bytes left [ 62.181603][ T4225] radio-raremono 3-1:0.35: raremono_cmd_main failed (-71) [ 62.250440][ T4225] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 62.303860][ T26] audit: type=1326 audit(1754881198.569:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4334 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f919bd5dbe9 code=0x7ffc0000 [ 62.346054][ T4225] usb 3-1: USB disconnect, device number 2 [ 62.380629][ T4225] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 62.493786][ T4299] usb 5-1: USB disconnect, device number 2 [ 62.563093][ T4346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13'. [ 62.595088][ T4346] device dummy0 entered promiscuous mode [ 62.619636][ T4346] device macsec1 entered promiscuous mode [ 62.971020][ T4350] use of bytesused == 0 is deprecated and will be removed in the future, [ 63.021156][ T4350] use the actual size instead. [ 63.048827][ T4299] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 63.138341][ T4354] tipc: Started in network mode [ 63.171175][ T4354] tipc: Node identity 9ec98cd9c5a4, cluster identity 4711 [ 63.198150][ T4354] tipc: Enabled bearer , priority 0 [ 63.224397][ T4360] device syzkaller0 entered promiscuous mode [ 63.268382][ T4354] tipc: Resetting bearer [ 63.284524][ T4353] tipc: Resetting bearer [ 63.327917][ T4353] tipc: Disabling bearer [ 63.335128][ T4226] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 63.483094][ T4299] usb 5-1: config 0 has an invalid interface number: 65 but max is 3 [ 63.502847][ T4299] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.542716][ T4299] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 63.552064][ T4299] usb 5-1: config 0 has no interface number 0 [ 63.573387][ T4372] device syzkaller0 entered promiscuous mode [ 63.592124][ T4374] netlink: 'syz.1.21': attribute type 39 has an invalid length. [ 63.623878][ T4226] usb 1-1: Using ep0 maxpacket: 32 [ 63.739155][ T4299] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=91.34 [ 63.758989][ T4299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.767119][ T4299] usb 5-1: Product: syz [ 63.771932][ T4226] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 63.796981][ T4226] usb 1-1: config 0 has no interface number 0 [ 63.810873][ T4226] usb 1-1: config 0 interface 230 has no altsetting 0 [ 63.823227][ T4299] usb 5-1: Manufacturer: syz [ 63.828033][ T4299] usb 5-1: SerialNumber: syz [ 63.864215][ T4299] usb 5-1: config 0 descriptor?? [ 64.039210][ T4226] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 64.051655][ T4226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.096285][ T4226] usb 1-1: Product: syz [ 64.112078][ T4226] usb 1-1: Manufacturer: syz [ 64.119444][ T4386] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 64.140129][ T4386] syzkaller1: linktype set to 780 [ 64.147176][ T4226] usb 1-1: SerialNumber: syz [ 64.171073][ T4226] usb 1-1: config 0 descriptor?? [ 64.229892][ T4226] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 64.262759][ T4226] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 64.400343][ T4299] flexcop_usb: set interface failed. [ 64.405702][ T4299] b2c2_flexcop_usb: probe of 5-1:0.65 failed with error -22 [ 64.438555][ T4395] binder: 4390:4395 ioctl c0306201 0 returned -14 [ 64.464529][ T4299] usb 5-1: USB disconnect, device number 3 [ 64.658150][ T4403] netlink: 'syz.1.29': attribute type 4 has an invalid length. [ 64.679352][ T4403] netlink: 'syz.1.29': attribute type 7 has an invalid length. [ 64.687734][ T4403] netlink: 198236 bytes leftover after parsing attributes in process `syz.1.29'. [ 64.878692][ T4414] netlink: 'syz.4.35': attribute type 39 has an invalid length. [ 65.086743][ T26] audit: type=1326 audit(1754881201.809:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c866efbe9 code=0x7ffc0000 [ 65.114494][ T26] audit: type=1326 audit(1754881201.809:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c866efbe9 code=0x7ffc0000 [ 65.144094][ T26] audit: type=1326 audit(1754881201.809:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f7c866efbe9 code=0x7ffc0000 [ 65.201426][ T26] audit: type=1326 audit(1754881201.809:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c866efbe9 code=0x7ffc0000 [ 65.561606][ T4262] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 65.619389][ T4225] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 65.818932][ T4262] usb 5-1: Using ep0 maxpacket: 8 [ 65.849575][ T4438] binder: 4437:4438 ioctl c0306201 0 returned -14 [ 65.949830][ T4262] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 65.977721][ T4262] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 65.989099][ T4225] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 66.020989][ T4225] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 66.034458][ T4262] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 66.060737][ T4225] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 66.087087][ T4262] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 66.126393][ T4262] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.126417][ T4225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.192042][ T4262] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 66.209012][ T4262] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.559945][ T4262] usb 5-1: GET_CAPABILITIES returned 0 [ 66.573369][ T4262] usbtmc 5-1:16.0: can't read capabilities [ 66.622143][ T4226] ums-usbat: probe of 1-1:0.230 failed with error 4 [ 66.640953][ T4424] input: syz1 as /devices/virtual/input/input5 [ 66.652092][ T4226] usb 1-1: USB disconnect, device number 2 [ 66.784791][ T4262] usb 5-1: USB disconnect, device number 4 [ 67.078962][ T4226] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 67.328802][ T4226] usb 1-1: Using ep0 maxpacket: 32 [ 67.480135][ T4226] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 67.491385][ T4226] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.501831][ T4226] usb 1-1: config 0 has no interface number 0 [ 67.544402][ T4226] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 67.763832][ T4226] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 67.773369][ T4226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.781860][ T4226] usb 1-1: Product: syz [ 67.786345][ T4226] usb 1-1: Manufacturer: syz [ 67.793082][ T4226] usb 1-1: SerialNumber: syz [ 67.802552][ T4226] usb 1-1: config 0 descriptor?? [ 67.840888][ T4226] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 67.864556][ T4226] radio-si470x: probe of 1-1:0.35 failed with error -5 [ 67.885434][ T4468] netlink: 'syz.2.50': attribute type 39 has an invalid length. [ 68.078946][ T4226] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 68.208257][ T4474] binder: 4473:4474 ioctl c0306201 0 returned -14 [ 68.289207][ T4262] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 68.394461][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 68.404286][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.413504][ T4448] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.423753][ T4448] device bridge_slave_0 left promiscuous mode [ 68.434344][ T4448] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.450159][ T4448] device bridge_slave_1 left promiscuous mode [ 68.456625][ T4448] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.473644][ T4448] bond0: (slave bond_slave_0): Releasing backup interface [ 68.492951][ T4448] bond0: (slave bond_slave_1): Releasing backup interface [ 68.544506][ T4448] team0: Port device team_slave_0 removed [ 68.550426][ T4262] usb 2-1: Using ep0 maxpacket: 32 [ 68.579522][ T4448] team0: Port device team_slave_1 removed [ 68.590250][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.597863][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.615319][ T4448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.618873][ T4225] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 68.645848][ T4448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.700579][ T4262] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 68.731991][ T4262] usb 2-1: config 0 has no interface number 0 [ 68.753385][ T4262] usb 2-1: config 0 interface 230 has no altsetting 0 [ 68.776657][ T4247] usb 4-1: USB disconnect, device number 3 [ 68.868877][ T4225] usb 3-1: Using ep0 maxpacket: 8 [ 68.959121][ T4262] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 68.968498][ T4262] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.978228][ T4262] usb 2-1: Product: syz [ 68.983006][ T4262] usb 2-1: Manufacturer: syz [ 68.989075][ T4262] usb 2-1: SerialNumber: syz [ 68.990961][ T4225] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 68.995540][ T4262] usb 2-1: config 0 descriptor?? [ 69.037289][ T4225] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 69.049937][ T4262] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 69.065383][ T4225] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 69.082395][ T4492] netlink: 104 bytes leftover after parsing attributes in process `syz.3.60'. [ 69.083318][ T4262] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 69.106286][ T4225] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 69.133807][ T4225] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.161320][ T4225] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 69.170795][ T4225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.452937][ T4225] usb 3-1: GET_CAPABILITIES returned 0 [ 69.458547][ T4225] usbtmc 3-1:16.0: can't read capabilities [ 69.718359][ T7] usb 3-1: USB disconnect, device number 3 [ 69.938887][ T4226] radio-raremono 1-1:0.35: raremono_cmd_main failed (-71) [ 69.978141][ T4226] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 69.993435][ T4226] usb 1-1: USB disconnect, device number 3 [ 70.008172][ T4226] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 71.025286][ T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 71.059075][ T4226] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 71.233406][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.241669][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.331996][ T4226] usb 5-1: Using ep0 maxpacket: 8 [ 71.369956][ T4262] ums-usbat: probe of 2-1:0.230 failed with error 4 [ 71.389008][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.421969][ T4262] usb 2-1: USB disconnect, device number 2 [ 71.432010][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.457474][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.479238][ T4226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 71.509147][ T4226] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 71.513314][ T21] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.518614][ T4226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.563028][ T4226] usb 5-1: config 0 descriptor?? [ 71.597455][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.647752][ T21] usb 4-1: config 0 descriptor?? [ 71.785247][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 71.841994][ T4226] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 72.173595][ T21] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 72.252275][ T21] plantronics 0003:047F:FFFF.0001: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 72.339009][ T21] usb 5-1: USB disconnect, device number 5 [ 72.395798][ T4225] usb 4-1: USB disconnect, device number 4 [ 72.519667][ T4549] fido_id[4549]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 73.100122][ T4226] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 73.109655][ T4563] fuse: root generation should be zero [ 73.191012][ T4579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 73.275748][ T4584] tipc: Started in network mode [ 73.280833][ T4584] tipc: Node identity 421dc4a6e929, cluster identity 4711 [ 73.288224][ T4584] tipc: Enabled bearer , priority 0 [ 73.296274][ T4584] device syzkaller0 entered promiscuous mode [ 73.326112][ T4584] tipc: Resetting bearer [ 73.342342][ T4583] tipc: Resetting bearer [ 73.348784][ T4226] usb 3-1: Using ep0 maxpacket: 32 [ 73.367565][ T4583] tipc: Disabling bearer [ 73.417567][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 73.438299][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.446029][ T4586] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.457329][ T4586] device bridge_slave_0 left promiscuous mode [ 73.466528][ T4586] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.473991][ T4226] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 73.489291][ T4226] usb 3-1: config 0 has no interface number 0 [ 73.497829][ T4226] usb 3-1: config 0 interface 230 has no altsetting 0 [ 73.595107][ T4586] device bridge_slave_1 left promiscuous mode [ 73.615519][ T4586] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.628188][ T4586] bond0: (slave bond_slave_0): Releasing backup interface [ 73.659788][ T4226] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 73.686194][ T4226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.705718][ T4226] usb 3-1: Product: syz [ 73.727983][ T4226] usb 3-1: Manufacturer: syz [ 73.746495][ T4226] usb 3-1: SerialNumber: syz [ 73.765330][ T4226] usb 3-1: config 0 descriptor?? [ 73.801476][ T4586] bond0: (slave bond_slave_1): Releasing backup interface [ 73.820166][ T4226] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 73.846155][ T4226] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 73.955666][ T4586] team0: Port device team_slave_0 removed [ 74.006047][ T4586] team0: Port device team_slave_1 removed [ 74.014132][ T4586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.026288][ T4586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.035663][ T4586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.044487][ T4586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.939184][ T4225] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 75.208788][ T4225] usb 2-1: Using ep0 maxpacket: 16 [ 75.487054][ T4633] program syz.2.105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.578886][ T4225] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.605297][ T4225] usb 2-1: config 0 has no interfaces? [ 75.867913][ T4638] tipc: Started in network mode [ 75.887954][ T4638] tipc: Node identity da3ce385c07a, cluster identity 4711 [ 75.895359][ T4225] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 75.908186][ T4225] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 75.925958][ T4638] tipc: Enabled bearer , priority 0 [ 75.937561][ T4225] usb 2-1: Product: syz [ 75.968792][ T4225] usb 2-1: Manufacturer: syz [ 75.987794][ T4639] device syzkaller0 entered promiscuous mode [ 76.005372][ T4225] usb 2-1: SerialNumber: syz [ 76.040692][ T4225] usb 2-1: config 0 descriptor?? [ 76.073543][ T4638] tipc: Resetting bearer [ 76.114018][ T4637] tipc: Resetting bearer [ 76.166328][ T4226] ums-usbat: probe of 3-1:0.230 failed with error 4 [ 76.197380][ T4226] usb 3-1: USB disconnect, device number 4 [ 76.217548][ T4637] tipc: Disabling bearer [ 76.351187][ T1108] cfg80211: failed to load regulatory.db [ 77.719116][ T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 77.746390][ T4678] tipc: Enabled bearer , priority 0 [ 77.793191][ T4678] device syzkaller0 entered promiscuous mode [ 77.846269][ T4678] tipc: Resetting bearer [ 77.878965][ T1108] usb 2-1: USB disconnect, device number 3 [ 77.933863][ T4676] tipc: Resetting bearer [ 78.013329][ T4676] tipc: Disabling bearer [ 78.090299][ T4683] netlink: 'syz.1.122': attribute type 8 has an invalid length. [ 78.099055][ T21] usb 5-1: config 0 has no interfaces? [ 78.259808][ T21] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 78.279543][ T4685] capability: warning: `syz.2.123' uses 32-bit capabilities (legacy support in use) [ 78.304628][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.329891][ T21] usb 5-1: Product: syz [ 78.352045][ T21] usb 5-1: Manufacturer: syz [ 78.370392][ T21] usb 5-1: SerialNumber: syz [ 78.403074][ T21] usb 5-1: config 0 descriptor?? [ 79.151978][ T7] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 79.310438][ T4722] tipc: Started in network mode [ 79.329059][ T4722] tipc: Node identity 023c869b53ba, cluster identity 4711 [ 79.356631][ T4722] tipc: Enabled bearer , priority 0 [ 79.399276][ T4725] device syzkaller0 entered promiscuous mode [ 79.450634][ T4722] tipc: Resetting bearer [ 79.480763][ T4721] tipc: Resetting bearer [ 79.512004][ T4721] tipc: Disabling bearer [ 79.549166][ T7] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 79.578762][ T7] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.678932][ T7] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 79.756632][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.799531][ T4226] usb 5-1: USB disconnect, device number 6 [ 80.038941][ T7] usb 1-1: usb_control_msg returned -32 [ 80.048585][ T7] usbtmc 1-1:16.0: can't read capabilities [ 80.559230][ T4747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'. [ 80.868915][ T4758] netlink: 'syz.1.145': attribute type 10 has an invalid length. [ 81.031271][ T4758] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 81.152939][ T4766] tipc: Enabled bearer , priority 0 [ 81.170053][ T4766] device syzkaller0 entered promiscuous mode [ 81.210018][ T4766] tipc: Resetting bearer [ 81.232477][ T4765] tipc: Resetting bearer [ 81.259878][ T4765] tipc: Disabling bearer [ 81.340111][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 81.829704][ T4226] usb 1-1: USB disconnect, device number 4 [ 82.391545][ T4807] tipc: Enabled bearer , priority 0 [ 82.464880][ T4810] device syzkaller0 entered promiscuous mode [ 82.546269][ T4807] tipc: Resetting bearer [ 82.600001][ T4806] tipc: Resetting bearer [ 82.697568][ T4806] tipc: Disabling bearer [ 83.487010][ T4849] tipc: Enabled bearer , priority 0 [ 83.510254][ T4849] device syzkaller0 entered promiscuous mode [ 83.554607][ T4849] tipc: Resetting bearer [ 83.591297][ T4847] tipc: Resetting bearer [ 83.619189][ T4847] tipc: Disabling bearer [ 83.870883][ T4871] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 84.582406][ T4906] tipc: Enabled bearer , priority 0 [ 84.674646][ T4909] device syzkaller0 entered promiscuous mode [ 84.691858][ T4911] netlink: 32 bytes leftover after parsing attributes in process `syz.0.196'. [ 84.720048][ T4906] tipc: Resetting bearer [ 84.757759][ T4905] tipc: Resetting bearer [ 84.794096][ T4905] tipc: Disabling bearer [ 86.434828][ T4942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.205'. [ 86.699190][ T4948] tipc: Enabled bearer , priority 0 [ 86.764423][ T4948] device syzkaller0 entered promiscuous mode [ 86.794354][ T4948] tipc: Resetting bearer [ 86.825778][ T4947] tipc: Resetting bearer [ 86.852913][ T4947] tipc: Disabling bearer [ 86.935852][ T4963] netlink: 104 bytes leftover after parsing attributes in process `syz.3.215'. [ 87.548868][ T4226] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 87.844224][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 87.859278][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 87.882621][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 87.900814][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 87.918978][ T4226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.928971][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 87.945229][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 87.945871][ T4226] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 87.960629][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 87.977958][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 87.992541][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.006800][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.016170][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.022850][ T4226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.023948][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.054845][ T4226] usb 3-1: config 0 descriptor?? [ 88.074797][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.091329][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.095081][ T5006] tipc: Started in network mode [ 88.106748][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.123620][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.128004][ T5006] tipc: Node identity e2ea5ef671cc, cluster identity 4711 [ 88.154388][ T5006] tipc: Enabled bearer , priority 0 [ 88.155623][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.174316][ T5007] device syzkaller0 entered promiscuous mode [ 88.189988][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.204387][ T5006] tipc: Resetting bearer [ 88.206535][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.227114][ T5005] tipc: Resetting bearer [ 88.238336][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.252190][ T5005] tipc: Disabling bearer [ 88.259520][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.273612][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.286873][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.319041][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.338416][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.359974][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.408366][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.428930][ T4226] usbhid 3-1:0.0: can't add hid device: -71 [ 88.437378][ T4226] usbhid: probe of 3-1:0.0 failed with error -71 [ 88.447391][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.472043][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.478079][ T4226] usb 3-1: USB disconnect, device number 5 [ 88.503888][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.537130][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.548990][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.576354][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.609090][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.627833][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.646838][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.666986][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.686536][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.708848][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.726479][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.749031][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.756533][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.790369][ T4225] hid-generic 0000:007F:0005.0002: unknown main item tag 0x0 [ 88.830537][ T4225] hid-generic 0000:007F:0005.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 88.926398][ T5033] fido_id[5033]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 88.946079][ T4226] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 89.289004][ T4226] usb 3-1: Using ep0 maxpacket: 16 [ 89.409013][ T4226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.426312][ T4226] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 89.436730][ T4226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.457501][ T5057] tipc: Enabled bearer , priority 0 [ 89.485823][ T5057] device syzkaller0 entered promiscuous mode [ 89.487726][ T4226] usb 3-1: config 0 descriptor?? [ 89.535446][ T5057] tipc: Resetting bearer [ 89.589957][ T5056] tipc: Resetting bearer [ 89.617595][ T5056] tipc: Disabling bearer [ 89.695555][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 89.695569][ T26] audit: type=1400 audit(1754881226.419:17): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name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mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 90.621529][ T5096] tipc: Enabled bearer , priority 0 [ 90.652952][ T5096] device syzkaller0 entered promiscuous mode [ 90.677336][ T5096] tipc: Resetting bearer [ 90.704800][ T5095] tipc: Resetting bearer [ 90.742549][ T5095] tipc: Disabling bearer [ 91.386271][ T21] usb 3-1: USB disconnect, device number 6 [ 92.288912][ T4225] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 92.519848][ T5137] tipc: Enabled bearer , priority 0 [ 92.540857][ T4225] usb 5-1: Using ep0 maxpacket: 32 [ 92.572906][ T5137] tipc: Resetting bearer [ 92.582433][ T5136] tipc: Disabling bearer [ 92.659150][ T4225] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 92.676226][ T4225] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 92.702660][ T4225] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 92.715818][ T4225] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 92.748395][ T4225] usb 5-1: config 0 interface 0 has no altsetting 0 [ 92.928960][ T4225] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 93.019022][ T4225] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 93.063650][ T5154] IPVS: Scheduler module ip_vs_ not found [ 93.078113][ T4225] usb 5-1: Product: syz [ 93.148896][ T4225] usb 5-1: Manufacturer: syz [ 93.219723][ T5166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.279'. [ 93.234740][ T5160] process 'syz.2.276' launched './file0' with NULL argv: empty string added [ 93.243518][ T4225] usb 5-1: SerialNumber: syz [ 93.263234][ T4225] usb 5-1: config 0 descriptor?? [ 93.330224][ T4225] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 93.391925][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 93.430946][ T4225] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 94.005334][ T5189] tipc: Enabled bearer , priority 0 [ 94.033783][ T5189] device syzkaller0 entered promiscuous mode [ 94.066778][ T5189] tipc: Resetting bearer [ 94.097394][ T5188] tipc: Resetting bearer [ 94.110614][ T21] usb 5-1: USB disconnect, device number 7 [ 94.129213][ T5187] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 94.143474][ T5188] tipc: Disabling bearer [ 94.145593][ T21] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 95.088036][ T5226] tipc: Enabled bearer , priority 0 [ 95.117565][ T5226] device syzkaller0 entered promiscuous mode [ 95.175900][ T5226] tipc: Resetting bearer [ 95.226340][ T5224] tipc: Resetting bearer [ 95.261853][ T5224] tipc: Disabling bearer [ 95.638907][ T4225] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 95.748963][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 95.889200][ T4225] usb 5-1: Using ep0 maxpacket: 32 [ 96.019126][ T4225] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 96.054680][ T4225] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 96.066766][ T4225] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 96.095051][ T4225] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 96.108944][ T4225] usb 5-1: config 0 interface 0 has no altsetting 0 [ 96.116367][ T5272] tipc: Enabled bearer , priority 0 [ 96.126084][ T5272] device syzkaller0 entered promiscuous mode [ 96.149887][ T5270] tipc: Resetting bearer [ 96.159143][ T7] usb 2-1: config 0 has an invalid interface number: 58 but max is 0 [ 96.190190][ T5270] tipc: Disabling bearer [ 96.197875][ T7] usb 2-1: config 0 has no interface number 0 [ 96.279067][ T4225] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 96.300934][ T4225] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 96.311913][ T5279] capability: warning: `syz.2.316' uses deprecated v2 capabilities in a way that may be insecure [ 96.323764][ T4225] usb 5-1: Product: syz [ 96.327946][ T4225] usb 5-1: Manufacturer: syz [ 96.356879][ T4225] usb 5-1: SerialNumber: syz [ 96.410025][ T7] usb 2-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 96.424756][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.429890][ T4225] usb 5-1: config 0 descriptor?? [ 96.464188][ T7] usb 2-1: Product: syz [ 96.475777][ T7] usb 2-1: Manufacturer: syz [ 96.489759][ T4225] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 96.508824][ T7] usb 2-1: SerialNumber: syz [ 96.521458][ T7] usb 2-1: config 0 descriptor?? [ 96.547056][ T4225] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 96.721375][ T5288] device syzkaller0 entered promiscuous mode [ 96.756400][ T4226] usb 5-1: USB disconnect, device number 8 [ 96.759055][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 96.769317][ T5237] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 96.789315][ T4226] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 96.861919][ T5239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'. [ 96.886832][ T5292] bridge1: port 1(ip6gretap1) entered blocking state [ 96.924464][ T5292] bridge1: port 1(ip6gretap1) entered disabled state [ 96.934337][ T5292] device ip6gretap1 entered promiscuous mode [ 96.963453][ T5294] device veth3 entered promiscuous mode [ 96.976271][ T5294] bridge1: port 2(veth3) entered blocking state [ 97.005626][ T5294] bridge1: port 2(veth3) entered disabled state [ 97.074395][ T5299] ODEBUG: Out of memory. ODEBUG disabled [ 97.076787][ T7] kaweth 2-1:0.58: Firmware present in device. [ 97.108827][ T7] kaweth 2-1:0.58: Error reading configuration (-71), no net device created [ 97.125911][ T7] kaweth: probe of 2-1:0.58 failed with error -5 [ 97.147186][ T7] usb 2-1: USB disconnect, device number 4 [ 97.219737][ T5303] bridge0: port 1(team0) entered blocking state [ 97.232968][ T5303] bridge0: port 1(team0) entered disabled state [ 97.252828][ T5303] device team0 entered promiscuous mode [ 97.632437][ T5315] tipc: Enabled bearer , priority 0 [ 97.651723][ T5315] device syzkaller0 entered promiscuous mode [ 97.686700][ T5314] tipc: Resetting bearer [ 97.745276][ T5314] tipc: Disabling bearer [ 98.208823][ T4225] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 98.264778][ T5335] device syzkaller0 entered promiscuous mode [ 98.589070][ T4225] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.628597][ T4225] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.706994][ T4225] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 98.738082][ T4225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.757347][ T5346] tipc: Enabled bearer , priority 0 [ 98.765762][ T5346] device syzkaller0 entered promiscuous mode [ 98.795654][ T5345] tipc: Resetting bearer [ 98.853526][ T5345] tipc: Disabling bearer [ 99.048855][ T4225] usb 1-1: usb_control_msg returned -32 [ 99.054747][ T4225] usbtmc 1-1:16.0: can't read capabilities [ 99.428940][ T5361] usbtmc 1-1:16.0: usbtmc_ioctl_request failed -32 [ 99.447845][ T4225] usb 1-1: USB disconnect, device number 5 [ 99.920592][ T5370] device syzkaller0 entered promiscuous mode [ 100.037145][ T5380] tipc: Enabled bearer , priority 0 [ 100.057836][ T26] audit: type=1326 audit(1754881236.779:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c23edbe9 code=0x7ffc0000 [ 100.067663][ T5380] device syzkaller0 entered promiscuous mode [ 100.083935][ T26] audit: type=1326 audit(1754881236.819:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c23edbe9 code=0x7ffc0000 [ 100.110477][ T26] audit: type=1326 audit(1754881236.839:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f39c23edbe9 code=0x7ffc0000 [ 100.132654][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.175203][ T26] audit: type=1326 audit(1754881236.839:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c23edbe9 code=0x7ffc0000 [ 100.207285][ T5379] tipc: Resetting bearer [ 100.244506][ T5379] tipc: Disabling bearer [ 100.308953][ T26] audit: type=1326 audit(1754881236.839:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c23edbe9 code=0x7ffc0000 [ 100.342723][ T26] audit: type=1326 audit(1754881236.839:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f39c23edbe9 code=0x7ffc0000 [ 100.366650][ T26] audit: type=1326 audit(1754881236.839:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c23edbe9 code=0x7ffc0000 [ 100.509914][ T26] audit: type=1326 audit(1754881236.839:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c23edbe9 code=0x7ffc0000 [ 100.634613][ T26] audit: type=1326 audit(1754881236.839:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f39c23edbe9 code=0x7ffc0000 [ 100.812990][ T5415] netlink: 'syz.4.359': attribute type 6 has an invalid length. [ 101.378766][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #340!!! [ 101.431007][ T5428] device syzkaller0 entered promiscuous mode [ 101.456823][ T5430] tipc: Enabled bearer , priority 0 [ 101.542287][ T5430] device syzkaller0 entered promiscuous mode [ 101.593063][ T5429] tipc: Resetting bearer [ 101.656740][ T5429] tipc: Disabling bearer [ 102.078792][ T4226] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 102.129154][ T4225] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 102.167885][ T5461] loop6: detected capacity change from 0 to 1 [ 102.194873][ T5461] Dev loop6: unable to read RDB block 1 [ 102.205828][ T5461] loop6: unable to read partition table [ 102.225710][ T5461] loop6: partition table beyond EOD, truncated [ 102.260055][ T5461] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 102.338850][ T4226] usb 4-1: Using ep0 maxpacket: 16 [ 102.478877][ T4226] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 102.494558][ T4226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.498938][ T4225] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 102.510578][ T4226] usb 4-1: config 0 descriptor?? [ 102.540640][ T4225] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 102.562048][ T4226] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 102.578782][ T4225] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 102.593054][ T4225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.651760][ T5454] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 102.961831][ T4225] usb 1-1: USB disconnect, device number 6 [ 103.417403][ T5485] device syzkaller0 entered promiscuous mode [ 103.742456][ T5501] tipc: Enabled bearer , priority 0 [ 103.758093][ T5502] netlink: zone id is out of range [ 103.760922][ T5501] device syzkaller0 entered promiscuous mode [ 103.780461][ T5502] netlink: set zone limit has 4 unknown bytes [ 103.837822][ T5500] tipc: Resetting bearer [ 103.880533][ T5500] tipc: Disabling bearer [ 103.921391][ T4247] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 103.953613][ T4226] gspca_sonixj: reg_w1 err -110 [ 103.978846][ T4226] sonixj: probe of 4-1:0.0 failed with error -110 [ 104.208892][ T4247] usb 5-1: Using ep0 maxpacket: 16 [ 104.349040][ T4247] usb 5-1: config 0 has no interfaces? [ 104.431652][ T4247] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 104.452521][ T4247] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 104.478833][ T4247] usb 5-1: Manufacturer: syz [ 104.515249][ T4247] usb 5-1: config 0 descriptor?? [ 104.633058][ T4226] usb 4-1: USB disconnect, device number 5 [ 104.804117][ T7] usb 5-1: USB disconnect, device number 9 [ 104.856817][ T5523] device syzkaller0 entered promiscuous mode [ 105.277850][ T5544] tipc: Enabled bearer , priority 0 [ 105.288920][ T5544] tipc: Resetting bearer [ 105.373230][ T5542] tipc: Disabling bearer [ 105.726121][ T5563] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 107.043678][ T5580] device syzkaller0 entered promiscuous mode [ 107.078820][ T26] audit: type=1326 audit(1754881243.799:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5545 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c8668bdd9 code=0x7ffc0000 [ 107.179596][ T26] audit: type=1326 audit(1754881243.799:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5545 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c8668bdd9 code=0x7ffc0000 [ 107.252386][ T26] audit: type=1326 audit(1754881243.799:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5545 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c8668bdd9 code=0x7ffc0000 [ 107.326573][ T26] audit: type=1326 audit(1754881243.799:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5545 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c8668bdd9 code=0x7ffc0000 [ 107.431073][ T26] audit: type=1326 audit(1754881243.799:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5545 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c8668bdd9 code=0x7ffc0000 [ 107.519148][ T26] audit: type=1326 audit(1754881243.799:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5545 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c8668bdd9 code=0x7ffc0000 [ 107.545653][ T5596] tipc: Enabled bearer , priority 0 [ 107.584019][ T5596] tipc: Resetting bearer [ 107.619116][ T5595] tipc: Disabling bearer [ 107.628389][ T26] audit: type=1326 audit(1754881243.799:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5545 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c8668bdd9 code=0x7ffc0000 [ 107.704666][ T26] audit: type=1326 audit(1754881243.799:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5545 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c8668bdd9 code=0x7ffc0000 [ 107.790980][ T26] audit: type=1326 audit(1754881243.799:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5545 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c8668bdd9 code=0x7ffc0000 [ 107.868942][ T26] audit: type=1326 audit(1754881243.799:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5545 comm="syz.2.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7c8668bdd9 code=0x7ffc0000 [ 107.898866][ T4247] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 108.161860][ T4247] usb 2-1: Using ep0 maxpacket: 8 [ 108.188982][ T4226] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 108.279054][ T4247] usb 2-1: config 2 has an invalid interface number: 138 but max is 0 [ 108.287427][ T4247] usb 2-1: config 2 has no interface number 0 [ 108.321284][ T4247] usb 2-1: config 2 interface 138 has no altsetting 0 [ 108.519057][ T4247] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010e, bcdDevice=e8.14 [ 108.538418][ T4247] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.561168][ T4247] usb 2-1: Product: syz [ 108.565401][ T4247] usb 2-1: Manufacturer: syz [ 108.587962][ T4247] usb 2-1: SerialNumber: syz [ 108.624038][ T4226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.639731][ T4226] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 108.655146][ T4226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.677283][ T4226] usb 5-1: config 0 descriptor?? [ 108.861171][ T5637] tipc: Enabled bearer , priority 0 [ 108.891491][ T5637] tipc: Resetting bearer [ 108.913365][ T5636] tipc: Disabling bearer [ 109.064032][ T4226] usbhid 5-1:0.0: can't add hid device: -71 [ 109.070964][ T4226] usbhid: probe of 5-1:0.0 failed with error -71 [ 109.098755][ T4226] usb 5-1: USB disconnect, device number 10 [ 109.099417][ T4247] kvaser_usb 2-1:2.138: Cannot get usb endpoint(s) [ 109.121716][ T4247] usb 2-1: USB disconnect, device number 5 [ 109.191905][ T5644] device syzkaller0 entered promiscuous mode [ 109.488804][ T4226] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 109.616689][ T5651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.435'. [ 109.632512][ T5651] netlink: 20 bytes leftover after parsing attributes in process `syz.2.435'. [ 109.653783][ T5651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.435'. [ 109.673821][ T5651] netlink: 20 bytes leftover after parsing attributes in process `syz.2.435'. [ 109.738769][ T4226] usb 5-1: Using ep0 maxpacket: 32 [ 109.879094][ T4226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.890269][ T4226] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 109.900657][ T4226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.917544][ T4226] usb 5-1: config 0 descriptor?? [ 109.970600][ T4226] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 109.992012][ T4226] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 110.429542][ T21] usb 5-1: USB disconnect, device number 11 [ 110.445893][ T21] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 110.596413][ T5673] device syzkaller0 entered promiscuous mode [ 111.480206][ T5699] device syzkaller0 entered promiscuous mode [ 111.998321][ T5710] device syzkaller0 entered promiscuous mode [ 112.974251][ T5743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.466'. [ 113.001832][ T5744] device syzkaller0 entered promiscuous mode [ 113.257390][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 113.267731][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 113.349017][ T5760] netlink: 252 bytes leftover after parsing attributes in process `syz.2.474'. [ 113.429607][ T5752] device syzkaller0 entered promiscuous mode [ 114.116239][ T5775] input: syz1 as /devices/virtual/input/input7 [ 114.345895][ T5781] usb usb8: usbfs: process 5781 (syz.0.480) did not claim interface 0 before use [ 114.427673][ T5787] device syzkaller0 entered promiscuous mode [ 114.733836][ T5800] device syzkaller0 entered promiscuous mode [ 114.761174][ T5803] netlink: 76 bytes leftover after parsing attributes in process `syz.4.483'. [ 115.221385][ T4226] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 115.590130][ T4226] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.594190][ T5823] netlink: 196 bytes leftover after parsing attributes in process `syz.4.494'. [ 115.612463][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 115.618821][ T4226] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.685274][ T4226] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.715307][ T4226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.739554][ T5828] device syzkaller0 entered promiscuous mode [ 116.008983][ T4226] usb 3-1: GET_CAPABILITIES returned 0 [ 116.014520][ T4226] usbtmc 3-1:16.0: can't read capabilities [ 116.216956][ T21] usb 3-1: USB disconnect, device number 7 [ 116.807362][ T5848] device syzkaller0 entered promiscuous mode [ 117.143018][ T5864] loop2: detected capacity change from 0 to 7 [ 117.199872][ T5864] Dev loop2: unable to read RDB block 7 [ 117.236318][ T5864] loop2: unable to read partition table [ 117.252302][ T5864] loop2: partition table beyond EOD, truncated [ 117.272022][ T5864] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 117.455798][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 117.506325][ T5871] device syzkaller0 entered promiscuous mode [ 117.658833][ T1108] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 117.738887][ T4184] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 117.999051][ T4184] usb 1-1: Using ep0 maxpacket: 8 [ 118.036141][ T5885] device syzkaller0 entered promiscuous mode [ 118.080373][ T1108] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 118.096720][ T1108] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.107230][ T1108] usb 2-1: config 0 interface 0 has no altsetting 0 [ 118.115571][ T1108] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 118.128891][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.139478][ T4184] usb 1-1: config 32 has an invalid interface number: 32 but max is 0 [ 118.151922][ T4184] usb 1-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 118.164344][ T1108] usb 2-1: config 0 descriptor?? [ 118.169852][ T4184] usb 1-1: config 32 has no interface number 0 [ 118.176795][ T4184] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 118.186409][ T4184] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.245928][ T5888] netlink: 'syz.2.517': attribute type 1 has an invalid length. [ 118.261484][ T4184] hub 1-1:32.32: bad descriptor, ignoring hub [ 118.268812][ T4184] hub: probe of 1-1:32.32 failed with error -5 [ 118.282900][ T5888] netlink: 'syz.2.517': attribute type 2 has an invalid length. [ 118.785193][ T4184] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 119.040110][ T1108] usbhid 2-1:0.0: can't add hid device: -71 [ 119.047403][ T1108] usbhid: probe of 2-1:0.0 failed with error -71 [ 119.072417][ T1108] usb 2-1: USB disconnect, device number 6 [ 119.174403][ T5916] device syzkaller0 entered promiscuous mode [ 119.716696][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.540'. [ 119.838510][ T5960] syz.1.543 uses obsolete (PF_INET,SOCK_PACKET) [ 120.070179][ T5965] device syzkaller0 entered promiscuous mode [ 120.228921][ T4226] usb 1-1: USB disconnect, device number 7 [ 121.257048][ T6001] device syzkaller0 entered promiscuous mode [ 121.379382][ T1108] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 121.618963][ T1108] usb 3-1: Using ep0 maxpacket: 32 [ 121.724580][ T6028] tipc: Enabled bearer , priority 0 [ 121.738869][ T1108] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 121.745106][ T6028] tipc: Resetting bearer [ 121.767590][ T6030] policy can only be matched on NF_INET_PRE_ROUTING [ 121.767604][ T6030] unable to load match [ 121.803698][ T6027] tipc: Disabling bearer [ 121.924752][ T6034] program syz.3.568 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.998979][ T1108] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 122.042825][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 122.151389][ T1108] usb 3-1: Product: syz [ 122.155600][ T1108] usb 3-1: Manufacturer: syz [ 122.233310][ T1108] usb 3-1: SerialNumber: syz [ 122.301398][ T21] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 122.319675][ T1108] usb 3-1: config 0 descriptor?? [ 122.390163][ T6002] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 122.520778][ T6052] device syzkaller0 entered promiscuous mode [ 122.670113][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.689088][ T21] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 122.720871][ T21] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 122.741399][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.777490][ T21] usb 2-1: config 0 descriptor?? [ 122.916515][ T6062] tipc: Enabled bearer , priority 0 [ 122.944582][ T6062] tipc: Resetting bearer [ 122.984582][ T6061] tipc: Disabling bearer [ 123.037343][ T6065] netlink: 24 bytes leftover after parsing attributes in process `syz.3.579'. [ 123.156474][ T4184] usb 2-1: USB disconnect, device number 7 [ 123.533893][ T4184] usb 3-1: USB disconnect, device number 8 [ 123.889237][ T6087] device syzkaller0 entered promiscuous mode [ 123.904017][ T6093] netlink: 104 bytes leftover after parsing attributes in process `syz.3.589'. [ 124.333893][ T6102] tipc: Enabled bearer , priority 0 [ 124.373793][ T6102] tipc: Resetting bearer [ 124.391949][ T6101] tipc: Disabling bearer [ 124.888780][ T4184] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 125.194336][ T6130] device syzkaller0 entered promiscuous mode [ 125.269508][ T4184] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 125.285107][ T4184] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 125.343604][ T4184] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 125.368367][ T4184] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 125.394859][ T4184] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 125.558972][ T4184] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 125.577443][ T4184] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 125.690621][ T4184] usb 2-1: Product: syz [ 125.715939][ T4184] usb 2-1: Manufacturer: syz [ 125.780713][ T4184] cdc_wdm 2-1:1.0: skipping garbage [ 125.788030][ T4184] cdc_wdm 2-1:1.0: skipping garbage [ 125.816059][ T4184] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 125.841659][ T4184] cdc_wdm 2-1:1.0: Unknown control protocol [ 125.901389][ T6143] tipc: Enabled bearer , priority 0 [ 125.947920][ T6143] tipc: Resetting bearer [ 125.961424][ T6142] tipc: Disabling bearer [ 125.987505][ T4184] usb 2-1: USB disconnect, device number 8 [ 126.608769][ T4184] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 126.833865][ T6161] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 127.009040][ T4184] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.032390][ T4184] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.073080][ T4184] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 127.085011][ T4184] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.189424][ T6165] device syzkaller0 entered promiscuous mode [ 127.328874][ T21] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 127.358840][ T4184] usb 5-1: usb_control_msg returned -32 [ 127.369819][ T4184] usbtmc 5-1:16.0: can't read capabilities [ 127.536370][ T6174] tipc: Enabled bearer , priority 0 [ 127.553172][ T6174] tipc: Resetting bearer [ 127.571637][ T6173] tipc: Disabling bearer [ 127.579020][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 127.698954][ T21] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 127.736049][ T21] usb 2-1: config 179 has no interface number 0 [ 127.765932][ T21] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 127.850177][ T21] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 127.879059][ T21] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 127.905457][ T21] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 127.942829][ T21] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 127.952597][ T4184] usb 5-1: USB disconnect, device number 12 [ 128.039774][ T21] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 128.058942][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.119068][ T6163] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 128.387449][ T21] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input8 [ 128.568252][ T4225] usb 2-1: USB disconnect, device number 9 [ 128.578732][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 128.579825][ T4225] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 128.854373][ T6206] device syzkaller0 entered promiscuous mode [ 129.052064][ T6211] tipc: Enabled bearer , priority 0 [ 129.141563][ T6211] tipc: Resetting bearer [ 129.155558][ T6210] tipc: Disabling bearer [ 129.461354][ T4225] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 129.491416][ T4225] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 129.895006][ T6243] device syzkaller0 entered promiscuous mode [ 130.051705][ T6250] fuse: Unknown parameter '00000000000000000000' [ 130.084312][ T6253] tipc: Enabling of bearer rejected, failed to enable media [ 130.985124][ T6291] device syzkaller0 entered promiscuous mode [ 131.846074][ T6308] tipc: Enabling of bearer rejected, failed to enable media [ 132.561782][ T4225] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 132.681457][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.688343][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.767288][ T6334] device syzkaller0 entered promiscuous mode [ 133.028927][ T4225] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.044501][ T4225] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 133.054000][ T4225] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 133.063358][ T4225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.080534][ T4225] usb 5-1: config 0 descriptor?? [ 133.143636][ T6347] netlink: 132 bytes leftover after parsing attributes in process `syz.2.671'. [ 133.284982][ T26] kauditd_printk_skb: 520 callbacks suppressed [ 133.284996][ T26] audit: type=1326 audit(1754881270.009:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.0.673" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39c23edbe9 code=0x0 [ 133.335405][ T4225] usb 5-1: USB disconnect, device number 13 [ 133.347547][ T6357] tipc: Enabling of bearer rejected, failed to enable media [ 133.976199][ T6381] device syzkaller0 entered promiscuous mode [ 134.008774][ T4184] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 134.213322][ T6388] syz.4.682 sent an empty control message without MSG_MORE. [ 134.382197][ T6396] tipc: Enabling of bearer rejected, failed to enable media [ 134.491940][ T4247] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 134.539123][ T4184] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 134.548931][ T4184] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.557446][ T4184] usb 4-1: Product: syz [ 134.562524][ T4184] usb 4-1: Manufacturer: syz [ 134.567137][ T4184] usb 4-1: SerialNumber: syz [ 134.630274][ T4184] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 134.788853][ T4247] usb 1-1: Using ep0 maxpacket: 32 [ 134.894030][ T6415] device wlan0 entered promiscuous mode [ 134.929581][ T6415] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 134.949895][ T4247] usb 1-1: config 0 has no interfaces? [ 134.958716][ T6417] tipc: Enabled bearer , priority 0 [ 134.972597][ T6417] device syzkaller0 entered promiscuous mode [ 135.004751][ T6417] tipc: Resetting bearer [ 135.045418][ T6416] tipc: Resetting bearer [ 135.071191][ T6416] tipc: Disabling bearer [ 135.104783][ T6419] device syzkaller0 entered promiscuous mode [ 135.168944][ T4247] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 135.188354][ T4247] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.230740][ T4247] usb 1-1: Product: syz [ 135.234941][ T4247] usb 1-1: Manufacturer: syz [ 135.242848][ T4247] usb 1-1: SerialNumber: syz [ 135.268917][ T4184] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 135.268923][ T4247] usb 1-1: config 0 descriptor?? [ 135.476781][ T6434] tipc: Enabling of bearer rejected, failed to enable media [ 135.562706][ T4225] usb 1-1: USB disconnect, device number 8 [ 135.991343][ T7] usb 4-1: USB disconnect, device number 6 [ 136.198231][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.703'. [ 136.348818][ T4184] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 136.353670][ T6459] @: renamed from vlan0 [ 136.373635][ T4184] ath9k_htc: Failed to initialize the device [ 136.404972][ T7] usb 4-1: ath9k_htc: USB layer deinitialized [ 136.435861][ T6463] netlink: 20 bytes leftover after parsing attributes in process `syz.4.707'. [ 136.488264][ T6465] device syzkaller0 entered promiscuous mode [ 136.631552][ T6471] tipc: Enabling of bearer rejected, failed to enable media [ 136.798833][ T4226] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 137.048826][ T4226] usb 3-1: Using ep0 maxpacket: 16 [ 137.196673][ T26] audit: type=1326 audit(1754881273.919:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.4.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc769eb5be9 code=0x7ffc0000 [ 137.245356][ T26] audit: type=1326 audit(1754881273.949:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.4.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc769eb5be9 code=0x7ffc0000 [ 137.268137][ T6499] netlink: 28 bytes leftover after parsing attributes in process `syz.4.719'. [ 137.287317][ T6499] netlink: 28 bytes leftover after parsing attributes in process `syz.4.719'. [ 137.297074][ T26] audit: type=1326 audit(1754881273.949:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.4.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc769eb5be9 code=0x7ffc0000 [ 137.323669][ T26] audit: type=1326 audit(1754881273.949:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.4.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc769eb5be9 code=0x7ffc0000 [ 137.333751][ T4226] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 137.346459][ T26] audit: type=1326 audit(1754881273.949:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.4.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc769eb5be9 code=0x7ffc0000 [ 137.368780][ T4184] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 137.390832][ T4226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.404637][ T4226] usb 3-1: Product: syz [ 137.411560][ T4226] usb 3-1: Manufacturer: syz [ 137.416192][ T4226] usb 3-1: SerialNumber: syz [ 137.422689][ T26] audit: type=1326 audit(1754881273.949:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.4.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc769eb5be9 code=0x7ffc0000 [ 137.452414][ T4226] r8152-cfgselector 3-1: config 0 descriptor?? [ 137.472505][ T26] audit: type=1326 audit(1754881273.949:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.4.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc769eb5be9 code=0x7ffc0000 [ 137.500408][ T26] audit: type=1326 audit(1754881273.949:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.4.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc769eb5be9 code=0x7ffc0000 [ 137.538595][ T26] audit: type=1326 audit(1754881273.959:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.4.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fc769eb5be9 code=0x7ffc0000 [ 137.642230][ T6509] device syzkaller0 entered promiscuous mode [ 137.759086][ T4184] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x64, skipping [ 137.787206][ T4184] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 137.806599][ T4184] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.819365][ T6525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.725'. [ 137.839493][ T4184] usb 4-1: config 0 descriptor?? [ 137.848971][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.725'. [ 137.866882][ T6525] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 137.989766][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.727'. [ 138.023921][ T4226] r8152-cfgselector 3-1: Unknown version 0x0000 [ 138.038455][ T4226] r8152-cfgselector 3-1: bad CDC descriptors [ 138.068825][ T4226] r8152-cfgselector 3-1: Unknown version 0x0000 [ 138.082768][ T4226] r8152-cfgselector 3-1: USB disconnect, device number 9 [ 138.118829][ T4184] ath6kl: Failed to submit usb control message: -71 [ 138.125472][ T4184] ath6kl: unable to send the bmi data to the device: -71 [ 138.134396][ T4184] ath6kl: Unable to send get target info: -71 [ 138.152084][ T4184] ath6kl: Failed to init ath6kl core: -71 [ 138.157093][ T6536] tipc: Enabling of bearer rejected, failed to enable media [ 138.189042][ T4184] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 138.200327][ T4184] usb 4-1: USB disconnect, device number 7 [ 138.438634][ T6549] mmap: syz.4.726 (6549) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 138.502490][ T6545] kvm [6543]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x4000 [ 138.938835][ T21] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 139.176383][ T6567] device syzkaller0 entered promiscuous mode [ 139.307420][ T6554] 8021q: VLANs not supported on caif0 [ 139.378826][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 139.518865][ T21] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 139.536659][ T21] usb 3-1: can't read configurations, error -71 [ 139.728783][ T4184] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 139.924251][ T6584] tipc: Enabling of bearer rejected, failed to enable media [ 139.979866][ T4184] usb 5-1: Using ep0 maxpacket: 32 [ 140.098907][ T4184] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 140.116656][ T4184] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 140.181483][ T4184] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 140.221040][ T4184] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 140.265914][ T4184] usb 5-1: config 0 interface 0 has no altsetting 0 [ 140.458959][ T4184] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 140.468210][ T4184] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 140.506226][ T6607] device syzkaller0 entered promiscuous mode [ 140.526627][ T4184] usb 5-1: Product: syz [ 140.551292][ T4184] usb 5-1: Manufacturer: syz [ 140.561402][ T4184] usb 5-1: SerialNumber: syz [ 140.596690][ T4184] usb 5-1: config 0 descriptor?? [ 140.660113][ T4184] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 140.717662][ T4184] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 141.139434][ T4225] usb 5-1: USB disconnect, device number 14 [ 141.148863][ T4184] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 141.149441][ T4225] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 141.388861][ T4184] usb 3-1: Using ep0 maxpacket: 16 [ 141.400189][ T6630] tipc: Enabling of bearer rejected, failed to enable media [ 141.508947][ T4184] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.528878][ T4184] usb 3-1: config 0 interface 0 has no altsetting 0 [ 141.551925][ T4184] usb 3-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.00 [ 141.577804][ T4184] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.612778][ T4184] usb 3-1: config 0 descriptor?? [ 141.627102][ T6641] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 141.742674][ T6644] device syzkaller0 entered promiscuous mode [ 141.898925][ T4184] usb 3-1: string descriptor 0 read error: -71 [ 141.915256][ T4184] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 141.988870][ T3544] bcm5974 3-1:0.0: could not read from device [ 142.005044][ T4184] usb 3-1: USB disconnect, device number 12 [ 142.011617][ T3544] bcm5974 3-1:0.0: could not read from device [ 142.037958][ T3544] bcm5974 3-1:0.0: could not read from device [ 142.875766][ T6684] tipc: Enabling of bearer rejected, failed to enable media [ 143.048606][ T6690] device syzkaller0 entered promiscuous mode [ 143.457872][ T6722] input: syz1 as /devices/virtual/input/input10 [ 143.618096][ T6726] only policy match revision 0 supported [ 143.618114][ T6726] unable to load match [ 144.413332][ T6743] tipc: Enabling of bearer rejected, failed to enable media [ 144.792521][ T6755] device syzkaller0 entered promiscuous mode [ 145.574650][ T6785] tipc: Enabling of bearer rejected, failed to enable media [ 145.817308][ T6793] device syzkaller0 entered promiscuous mode [ 146.418922][ T1108] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 146.739905][ T6826] tipc: Enabled bearer , priority 0 [ 146.752187][ T6826] tipc: Resetting bearer [ 146.761229][ T6825] tipc: Disabling bearer [ 146.923223][ T6828] device syzkaller0 entered promiscuous mode [ 148.558364][ T6863] tipc: Enabled bearer , priority 0 [ 148.612420][ T6863] tipc: Resetting bearer [ 148.691822][ T6862] tipc: Disabling bearer [ 148.793447][ T6867] device syzkaller0 entered promiscuous mode [ 149.288133][ T6881] loop8: detected capacity change from 0 to 7 [ 149.381974][ T6881] Dev loop8: unable to read RDB block 7 [ 149.460364][ T6881] loop8: unable to read partition table [ 149.579365][ T6881] loop8: partition table beyond EOD, truncated [ 149.663901][ T6881] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 150.026966][ T6898] tipc: Enabled bearer , priority 0 [ 150.038524][ T6898] tipc: Resetting bearer [ 150.066520][ T6897] tipc: Disabling bearer [ 150.327045][ T6902] device syzkaller0 entered promiscuous mode [ 150.443745][ T6907] netlink: 80 bytes leftover after parsing attributes in process `syz.2.844'. [ 150.509340][ T6907] netlink: 80 bytes leftover after parsing attributes in process `syz.2.844'. [ 150.938875][ T7] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 151.175623][ T6924] netlink: 'syz.2.849': attribute type 5 has an invalid length. [ 151.198839][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 151.319034][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 151.350303][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 151.391878][ T7] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 151.429164][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 151.449747][ T6934] device syzkaller0 entered promiscuous mode [ 151.474665][ T7] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 151.494974][ T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 151.504179][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.540109][ T7] usb 1-1: config 0 descriptor?? [ 151.604472][ T4197] Bluetooth: hci5: urb ffff8880224ba800 submission failed (90) [ 151.675582][ T6940] device syzkaller0 entered promiscuous mode [ 151.723647][ T6944] vcan0: tx drop: invalid sa for name 0x0000020000000004 [ 151.861031][ T21] usb 1-1: USB disconnect, device number 10 [ 152.343213][ T6964] program syz.3.864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.688763][ T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 152.958893][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 153.079280][ T7] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 153.105443][ T7] usb 1-1: config 0 has no interface number 0 [ 153.175007][ T7] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 153.297810][ T6981] device syzkaller0 entered promiscuous mode [ 153.409049][ T7] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 153.428905][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.476234][ T7] usb 1-1: Product: syz [ 153.493607][ T7] usb 1-1: Manufacturer: syz [ 153.503847][ T7] usb 1-1: SerialNumber: syz [ 153.522008][ T7] usb 1-1: config 0 descriptor?? [ 153.570144][ T7] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 153.601502][ T7] em28xx 1-1:0.132: Video interface 132 found: [ 153.780086][ T1108] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 153.798913][ T4184] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 153.988874][ T7] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 154.191528][ T1108] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.201899][ T4184] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 154.213958][ T1108] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 154.223489][ T4184] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 154.234286][ T1108] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 154.247637][ T4184] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 154.256828][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.274214][ T4184] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.292821][ T1108] usb 5-1: config 0 descriptor?? [ 154.342490][ T1108] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 154.349857][ T4184] usb 2-1: invalid MIDI out EP 0 [ 154.356774][ T1108] dvb-usb: bulk message failed: -22 (3/0) [ 154.384427][ T1108] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 154.409188][ T1108] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 154.419540][ T4184] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 154.419700][ T1108] usb 5-1: media controller created [ 154.436552][ T1108] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 154.470167][ T5480] udevd[5480]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.474660][ T1108] dvb-usb: bulk message failed: -22 (6/0) [ 154.614095][ T1108] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 154.680157][ T1108] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 154.722540][ T1108] dvb-usb: schedule remote query interval to 150 msecs. [ 154.753898][ T1108] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 154.816409][ T1108] usb 5-1: USB disconnect, device number 15 [ 154.900621][ T1108] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 155.158887][ T7] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 155.200789][ T7] em28xx 1-1:0.132: board has no eeprom [ 155.211932][ T6969] em28xx 1-1:0.132: failed to trigger write to i2c address 0x2 (error=-5) [ 155.308953][ T7] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 155.343967][ T7] em28xx 1-1:0.132: analog set to bulk mode. [ 155.373600][ T1108] em28xx 1-1:0.132: Registering V4L2 extension [ 155.381048][ T7021] device syzkaller0 entered promiscuous mode [ 155.414327][ T7] usb 1-1: USB disconnect, device number 11 [ 155.475515][ T7] em28xx 1-1:0.132: Disconnecting em28xx [ 155.743045][ T1108] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 155.752922][ T1108] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 155.772393][ T7030] device syzkaller0 entered promiscuous mode [ 155.778452][ T1108] em28xx 1-1:0.132: No AC97 audio processor [ 155.855208][ T1108] usb 1-1: Decoder not found [ 155.868757][ T1108] em28xx 1-1:0.132: failed to create media graph [ 155.892828][ T1108] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 155.953824][ T7038] ================================================================== [ 155.962171][ T7038] BUG: KASAN: use-after-free in v4l2_fh_open+0xc6/0x430 [ 155.969253][ T7038] Read of size 8 at addr ffff8880781e4900 by task v4l_id/7038 [ 155.976710][ T7038] [ 155.979027][ T7038] CPU: 0 PID: 7038 Comm: v4l_id Not tainted 5.15.189-syzkaller #0 [ 155.987045][ T7038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.997196][ T7038] Call Trace: [ 156.000465][ T7038] [ 156.003401][ T7038] dump_stack_lvl+0x168/0x230 [ 156.008098][ T7038] ? show_regs_print_info+0x20/0x20 [ 156.013284][ T7038] ? _printk+0xcc/0x110 [ 156.017446][ T7038] ? v4l2_fh_open+0xc6/0x430 [ 156.022035][ T7038] ? load_image+0x3b0/0x3b0 [ 156.026525][ T7038] print_address_description+0x60/0x2d0 [ 156.032078][ T7038] ? v4l2_fh_open+0xc6/0x430 [ 156.036862][ T7038] kasan_report+0xdf/0x130 [ 156.041407][ T7038] ? v4l2_fh_open+0xc6/0x430 [ 156.046002][ T7038] v4l2_fh_open+0xc6/0x430 [ 156.050414][ T7038] em28xx_v4l2_open+0x152/0x990 [ 156.055376][ T7038] ? __lock_acquire+0x7c60/0x7c60 [ 156.060413][ T7038] v4l2_open+0x20b/0x360 [ 156.064765][ T7038] chrdev_open+0x597/0x670 [ 156.069170][ T7038] ? cd_forget+0x160/0x160 [ 156.073571][ T7038] ? tomoyo_file_open+0xe9/0x170 [ 156.078511][ T7038] ? fsnotify_perm+0x3a7/0x560 [ 156.083271][ T7038] ? cd_forget+0x160/0x160 [ 156.087674][ T7038] do_dentry_open+0x7ff/0xf80 [ 156.092338][ T7038] path_openat+0x2682/0x2f30 [ 156.096927][ T7038] ? __kasan_slab_alloc+0xb3/0xd0 [ 156.101934][ T7038] ? __kasan_slab_alloc+0x9c/0xd0 [ 156.106939][ T7038] ? slab_post_alloc_hook+0x4c/0x380 [ 156.112312][ T7038] ? verify_lock_unused+0x140/0x140 [ 156.117491][ T7038] ? __x64_sys_openat+0x135/0x160 [ 156.122498][ T7038] ? do_filp_open+0x3e0/0x3e0 [ 156.127164][ T7038] do_filp_open+0x1b3/0x3e0 [ 156.131809][ T7038] ? vfs_tmpfile+0x300/0x300 [ 156.136419][ T7038] ? _raw_spin_unlock+0x24/0x40 [ 156.141270][ T7038] ? alloc_fd+0x598/0x630 [ 156.145606][ T7038] do_sys_openat2+0x142/0x4a0 [ 156.150295][ T7038] ? __lock_acquire+0x7c60/0x7c60 [ 156.155311][ T7038] ? do_sys_open+0xe0/0xe0 [ 156.159709][ T7038] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 156.165677][ T7038] ? lock_chain_count+0x20/0x20 [ 156.170517][ T7038] ? vtime_user_exit+0x2dc/0x400 [ 156.175530][ T7038] __x64_sys_openat+0x135/0x160 [ 156.180371][ T7038] do_syscall_64+0x4c/0xa0 [ 156.184787][ T7038] ? clear_bhb_loop+0x30/0x80 [ 156.189465][ T7038] ? clear_bhb_loop+0x30/0x80 [ 156.194132][ T7038] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.200036][ T7038] RIP: 0033:0x7fe363887407 [ 156.204447][ T7038] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 156.224122][ T7038] RSP: 002b:00007ffee785dd90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 156.232735][ T7038] RAX: ffffffffffffffda RBX: 00007fe363799880 RCX: 00007fe363887407 [ 156.240696][ T7038] RDX: 0000000000000000 RSI: 00007ffee785ef1b RDI: ffffffffffffff9c [ 156.248907][ T7038] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 156.257071][ T7038] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 156.265256][ T7038] R13: 00007ffee785dfe0 R14: 00007fe364015000 R15: 0000563c96fdf4d8 [ 156.273421][ T7038] [ 156.276533][ T7038] [ 156.278840][ T7038] The buggy address belongs to the page: [ 156.284863][ T7038] page:ffffea0001e07900 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x781e4 [ 156.295020][ T7038] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 156.302323][ T7038] raw: 00fff00000000000 ffffea000080b108 ffff8880b90409b0 0000000000000000 [ 156.311016][ T7038] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 156.319603][ T7038] page dumped because: kasan: bad access detected [ 156.326026][ T7038] page_owner tracks the page as freed [ 156.331374][ T7038] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x140dc0(GFP_USER|__GFP_COMP|__GFP_ZERO), pid 1108, ts 155409097483, free_ts 155952496219 [ 156.347077][ T7038] get_page_from_freelist+0x1b77/0x1c60 [ 156.352610][ T7038] __alloc_pages+0x1e1/0x470 [ 156.357187][ T7038] kmalloc_order+0x40/0x150 [ 156.361666][ T7038] kmalloc_order_trace+0x14/0xf0 [ 156.366873][ T7038] em28xx_v4l2_init+0xe2/0x2e50 [ 156.371798][ T7038] em28xx_init_extension+0x118/0x1b0 [ 156.377070][ T7038] process_one_work+0x863/0x1000 [ 156.381984][ T7038] worker_thread+0xaa8/0x12a0 [ 156.386771][ T7038] kthread+0x436/0x520 [ 156.390845][ T7038] ret_from_fork+0x1f/0x30 [ 156.395509][ T7038] page last free stack trace: [ 156.400264][ T7038] free_unref_page_prepare+0x637/0x6c0 [ 156.405765][ T7038] free_unref_page+0x94/0x280 [ 156.410434][ T7038] free_nonslab_page+0xe2/0x150 [ 156.415365][ T7038] em28xx_v4l2_init+0x1649/0x2e50 [ 156.420369][ T7038] em28xx_init_extension+0x118/0x1b0 [ 156.425722][ T7038] process_one_work+0x863/0x1000 [ 156.430642][ T7038] worker_thread+0xaa8/0x12a0 [ 156.435464][ T7038] kthread+0x436/0x520 [ 156.439529][ T7038] ret_from_fork+0x1f/0x30 [ 156.443950][ T7038] [ 156.446259][ T7038] Memory state around the buggy address: [ 156.451872][ T7038] ffff8880781e4800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 156.459910][ T7038] ffff8880781e4880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 156.467954][ T7038] >ffff8880781e4900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 156.476180][ T7038] ^ [ 156.480259][ T7038] ffff8880781e4980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 156.488320][ T7038] ffff8880781e4a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 156.496490][ T7038] ================================================================== [ 156.504554][ T7038] Disabling lock debugging due to kernel taint [ 156.519485][ T1108] em28xx 1-1:0.132: Remote control support is not available for this card. [ 156.545390][ T7] em28xx 1-1:0.132: Closing input extension [ 156.553197][ T7038] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 156.560406][ T7038] CPU: 0 PID: 7038 Comm: v4l_id Tainted: G B 5.15.189-syzkaller #0 [ 156.569601][ T7038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 156.579640][ T7038] Call Trace: [ 156.582921][ T7038] [ 156.585972][ T7038] dump_stack_lvl+0x168/0x230 [ 156.590642][ T7038] ? show_regs_print_info+0x20/0x20 [ 156.596257][ T7038] ? load_image+0x3b0/0x3b0 [ 156.600748][ T7038] panic+0x2c9/0x7f0 [ 156.604622][ T7038] ? bpf_jit_dump+0xd0/0xd0 [ 156.609105][ T7038] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 156.615429][ T7038] ? _raw_spin_unlock+0x40/0x40 [ 156.620266][ T7038] ? print_memory_metadata+0x314/0x400 [ 156.625741][ T7038] ? v4l2_fh_open+0xc6/0x430 [ 156.630323][ T7038] check_panic_on_warn+0x80/0xa0 [ 156.635252][ T7038] ? v4l2_fh_open+0xc6/0x430 [ 156.639905][ T7038] end_report+0x6d/0xf0 [ 156.644125][ T7038] kasan_report+0x102/0x130 [ 156.648604][ T7038] ? v4l2_fh_open+0xc6/0x430 [ 156.653203][ T7038] v4l2_fh_open+0xc6/0x430 [ 156.657617][ T7038] em28xx_v4l2_open+0x152/0x990 [ 156.662546][ T7038] ? __lock_acquire+0x7c60/0x7c60 [ 156.667565][ T7038] v4l2_open+0x20b/0x360 [ 156.671795][ T7038] chrdev_open+0x597/0x670 [ 156.676197][ T7038] ? cd_forget+0x160/0x160 [ 156.680684][ T7038] ? tomoyo_file_open+0xe9/0x170 [ 156.685624][ T7038] ? fsnotify_perm+0x3a7/0x560 [ 156.690373][ T7038] ? cd_forget+0x160/0x160 [ 156.694795][ T7038] do_dentry_open+0x7ff/0xf80 [ 156.699464][ T7038] path_openat+0x2682/0x2f30 [ 156.704071][ T7038] ? __kasan_slab_alloc+0xb3/0xd0 [ 156.706796][ T23] usb 2-1: USB disconnect, device number 10 [ 156.709100][ T7038] ? __kasan_slab_alloc+0x9c/0xd0 [ 156.709120][ T7038] ? slab_post_alloc_hook+0x4c/0x380 [ 156.709134][ T7038] ? verify_lock_unused+0x140/0x140 [ 156.709149][ T7038] ? __x64_sys_openat+0x135/0x160 [ 156.735761][ T7038] ? do_filp_open+0x3e0/0x3e0 [ 156.740435][ T7038] do_filp_open+0x1b3/0x3e0 [ 156.745104][ T7038] ? vfs_tmpfile+0x300/0x300 [ 156.749762][ T7038] ? _raw_spin_unlock+0x24/0x40 [ 156.754739][ T7038] ? alloc_fd+0x598/0x630 [ 156.759273][ T7038] do_sys_openat2+0x142/0x4a0 [ 156.763939][ T7038] ? __lock_acquire+0x7c60/0x7c60 [ 156.768953][ T7038] ? do_sys_open+0xe0/0xe0 [ 156.773365][ T7038] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 156.779375][ T7038] ? lock_chain_count+0x20/0x20 [ 156.784219][ T7038] ? vtime_user_exit+0x2dc/0x400 [ 156.789145][ T7038] __x64_sys_openat+0x135/0x160 [ 156.793990][ T7038] do_syscall_64+0x4c/0xa0 [ 156.798406][ T7038] ? clear_bhb_loop+0x30/0x80 [ 156.803071][ T7038] ? clear_bhb_loop+0x30/0x80 [ 156.807745][ T7038] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 156.813636][ T7038] RIP: 0033:0x7fe363887407 [ 156.818050][ T7038] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 156.837641][ T7038] RSP: 002b:00007ffee785dd90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 156.846249][ T7038] RAX: ffffffffffffffda RBX: 00007fe363799880 RCX: 00007fe363887407 [ 156.854240][ T7038] RDX: 0000000000000000 RSI: 00007ffee785ef1b RDI: ffffffffffffff9c [ 156.862201][ T7038] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 156.870155][ T7038] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 156.878124][ T7038] R13: 00007ffee785dfe0 R14: 00007fe364015000 R15: 0000563c96fdf4d8 [ 156.886105][ T7038] [ 156.889644][ T7038] Kernel Offset: disabled [ 156.893978][ T7038] Rebooting in 86400 seconds..