last executing test programs: 10.207896775s ago: executing program 0 (id=1171): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x6}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x36, 0x2, 0x7fff}}}}]}, 0x44}}, 0x4004) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x2, 0x1}}]}}]}, 0x3c}}, 0x44010) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.95194793s ago: executing program 0 (id=1174): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0)=0xff, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 9.827127051s ago: executing program 0 (id=1176): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0xb0aa, 0x0, 0xfffffff8, 0xfffffffd, 0x0, r0}, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = gettid() prlimit64(r1, 0x0, 0x0, 0x0) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r2, 0x1000000, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000023c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000004780)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="63f32d6c78c0d208", 0x8}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)=""/4096, 0x34000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4b, 0xdc, 0xad, 0x40, 0xa766, 0x7cb5, 0x553a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x2, 0x50}}]}}]}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 8.32014113s ago: executing program 1 (id=1191): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0701, 0x0) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 6.540062898s ago: executing program 0 (id=1204): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000008440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000001180)={&(0x7f00000000c0)={0x50, 0xffffffffffffffda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.348603255s ago: executing program 2 (id=1207): sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f000000a2c0)={0x0, 0x0, 0x0}, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 6.207992774s ago: executing program 0 (id=1208): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 6.19158195s ago: executing program 2 (id=1210): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=@newqdisc={0x434, 0x24, 0x1, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xd7f, 0x2, 0x8, 0x5d7, 0x8000, 0x5, 0xf6, 0x0, 0x4, 0x101, 0x8, 0x6, 0x4, 0x6, 0x2, 0x19480, 0x8, 0x8d5, 0x3, 0xc34, 0x2, 0x9, 0x347, 0xfffffe00, 0xa, 0x400, 0x9, 0x10, 0x80000000, 0x1, 0x80, 0xfffffff8, 0x16b, 0x6, 0x7b2, 0x2, 0x4, 0x4, 0xff, 0xffff8000, 0x4, 0x3, 0x9, 0x5, 0x2, 0x9, 0x6, 0x7, 0x35, 0x9, 0x1c, 0xb2, 0x1ff, 0xffff, 0xd, 0x9, 0x0, 0xfffffce1, 0xfffffffc, 0x3, 0x7, 0x2, 0xe, 0xec, 0xfffffff8, 0x7, 0x2, 0x5, 0x7, 0xea7f, 0x9, 0x8efe, 0x5b762199, 0x474, 0x101, 0xfffffffb, 0xfffffffa, 0x8, 0x2000, 0x1, 0x8, 0xa3d6, 0x800, 0x3, 0x1, 0x1, 0x35f, 0xa9, 0x6, 0x81, 0x72, 0xfffffff1, 0xf8e, 0x0, 0x1, 0x8, 0x8, 0xa, 0xffffff91, 0x5, 0x3, 0x9, 0x6, 0xdbeb, 0x5, 0x8, 0x3, 0x7, 0x7fffffff, 0x4, 0x6, 0xb97, 0x2, 0x1, 0x8, 0x7, 0x5, 0x8, 0x9, 0xffff, 0x90, 0x4, 0x9, 0x9, 0xffff7fff, 0xf, 0x2, 0x9, 0x7, 0x1, 0x7fffffff, 0x6f8a9f44, 0xce, 0x4, 0x1, 0x100, 0x8, 0x3, 0x1, 0xe7, 0x2, 0x4, 0x7, 0x6, 0x7f, 0x9, 0x7fffffff, 0x80000001, 0x825, 0x8, 0x6, 0x2, 0x1204, 0x101, 0xffffffff, 0x8, 0x1, 0x3, 0x0, 0x7, 0x2, 0x2, 0xa, 0x1, 0x0, 0xc9d, 0x2, 0x2, 0x5, 0x4f, 0xffffff80, 0x4, 0x2, 0xa, 0x7, 0x6, 0x401, 0x2848, 0x6, 0x5, 0x1, 0x1ff, 0x5, 0x2, 0x4, 0x0, 0x8, 0x5, 0x0, 0x7, 0x1, 0x2, 0x8, 0x401, 0x6, 0x4, 0x9, 0x3, 0x5, 0xf05e, 0x5, 0x9, 0x800, 0x3, 0xffffffb7, 0x1, 0x2, 0xd, 0x3, 0x7, 0xb7e2, 0xf, 0x8, 0xb70, 0x0, 0x5, 0x3, 0xba8, 0x8, 0xff0, 0x3, 0x7, 0x66, 0xc, 0x5, 0x3, 0xd4, 0x358, 0xffffffff, 0x7fff, 0x2, 0x81, 0x7, 0xa1, 0x4, 0x8000, 0xe3, 0x100, 0x7fff, 0x0, 0x9, 0x6, 0xe, 0xff4, 0x8, 0x1f7, 0x9, 0x7fffffff, 0x0, 0x48cf, 0x7, 0x6e22, 0x5, 0x4, 0x3]}]}}]}, 0x434}}, 0x0) 6.037804537s ago: executing program 2 (id=1213): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000680)={[0x0, 0x68fa61a6, 0x20000000000000], 0x0, 0x2c0710}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000000)={0x0, 0x0, @ioapic={0x5000, 0xb, 0x7, 0x3, 0x0, [{0x0, 0xb3, 0x6}, {0x10, 0x7, 0x4, '\x00', 0x9e}, {0xab, 0x4, 0x2, '\x00', 0x40}, {0x8, 0x1, 0x3, '\x00', 0x82}, {0x8, 0x87, 0x9, '\x00', 0x9}, {0x5, 0xf6, 0x4, '\x00', 0x9}, {0x9, 0xd, 0x4, '\x00', 0x2}, {0xf4, 0x7, 0x28, '\x00', 0xff}, {0x2, 0x5, 0x0, '\x00', 0x7c}, {0x44, 0x0, 0x9, '\x00', 0xc}, {0x6, 0x8, 0x2, '\x00', 0x6}, {0xd, 0x40, 0x8, '\x00', 0x8e}, {0x81, 0x6, 0x9, '\x00', 0xa7}, {0x40, 0xf9, 0xf, '\x00', 0x4}, {0x3, 0x0, 0x8, '\x00', 0x2}, {0x6, 0x3, 0x40, '\x00', 0xa}, {0x6, 0xf7, 0x2, '\x00', 0x4c}, {0x5, 0x0, 0x3, '\x00', 0xc}, {0x3e, 0x6, 0xff, '\x00', 0x9}, {0xe1, 0x85, 0x8}, {0x4, 0x8, 0x8, '\x00', 0x4}, {0x9, 0x20, 0xfc, '\x00', 0x8}, {0x4, 0x88, 0xb3}, {0x5, 0x4, 0x0, '\x00', 0x3}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.90755473s ago: executing program 0 (id=1215): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) sendmmsg$inet(r1, &(0x7f0000005040)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000007c0)="493f78b01549c2d12453d7ac4c08e4fe6189e8fc9046644dd3ec7f26db868b3f83b564d8eed87f9dd56939c38f29240e61ce7e90401583b6c86dbd23787dafa5a05f9aa620e964839cf998cd0172c9117cc29ef2b5d2dad96b0d387980cf30660bb420543e83f1e2fb179c7ccb80885dba90fabcfd5187c4fe48964ca134fe4598b281caa3", 0x85}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)="530783982826008b6fd7226cb72e61e9f0a8ffff3d8da6", 0x17}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x33, 0x1, 0x0, [{@multicast2, 0x9}, {@multicast2}]}, @cipso={0x86, 0x37, 0x3, [{0x1, 0x6, "171fa24b"}, {0x7, 0x8, "67adb66a6238"}, {0x6, 0xd, "7dcde74d25055fefa8d03e"}, {0x7, 0x5, "be7355"}, {0x6, 0x11, "9923d4ab55920a8361e1d030e5466f"}]}]}}}], 0x98}}], 0x2, 0x0) recvmsg(r1, &(0x7f0000008ac0)={0x0, 0x0, &(0x7f0000006380)=[{&(0x7f0000009140)=""/132, 0x84}], 0x1}, 0x102) 5.641798055s ago: executing program 2 (id=1217): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1c, 0x4, 0x0, 0x0, 0x70, 0x67, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@ssrr={0x89, 0xb, 0xe5, [@loopback, @local]}, @timestamp_prespec={0x44, 0x4, 0xc0, 0x3, 0x1}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@loopback}, {@remote, 0xfffffffd}, {@multicast2, 0xb}, {@private=0xa010100}, {@rand_addr=0x64010101}, {@rand_addr=0x64010100, 0x52b1}]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @rand_addr=0x64010101, @rand_addr=0x64010101]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.28800715s ago: executing program 4 (id=1221): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x88, &(0x7f0000000040)=ANY=[]) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f00000008c0)=""/206, 0x6e) 5.287661986s ago: executing program 2 (id=1222): signalfd(0xffffffffffffffff, &(0x7f0000000c80)={[0xfffffffffffffffe]}, 0x8) r0 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) 5.174983291s ago: executing program 1 (id=1223): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) sendmsg$sock(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}, 0x0) syz_usb_connect(0x0, 0xd0, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x6b, 0x28, 0x74, 0x40, 0x1199, 0xb000, 0x2240, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x67, 0x7, 0x42, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}, @generic={0x51, 0x0, "6633a34e567f11516feb899eb5d6f8d0f7eea4c83c9196147369f901364b8890eb16a4f978c7f13b37020ba5b803955d3e00021906699085b99c8981ba57d80ca4d37cbff134c78264b4dd270f0441"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x42, 0x0, "835124cdb1655c9d0e21e1430f4a7c97570b28677a7d6ee40bf77b414c1eed236c0a4c4a9d461bdef843a89bf053a84b12d7ef999bcb5a98e60a54355a5ced93"}]}}]}}]}}]}}, 0x0) 4.426573575s ago: executing program 3 (id=1224): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/157, 0x9d}, {&(0x7f0000000340)=""/184, 0xb8}], 0x2) r2 = dup2(r1, r0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000800000000000000000001d00"}) r3 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r3, 0x540a, 0x3) 4.13605415s ago: executing program 3 (id=1225): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x40000) 3.457429225s ago: executing program 1 (id=1226): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3, r3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000300)={0x18, r4, r1}) 3.23833094s ago: executing program 1 (id=1227): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) sendmmsg$inet(r1, &(0x7f0000005040)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000007c0)="493f78b01549c2d12453d7ac4c08e4fe6189e8fc9046644dd3ec7f26db868b3f83b564d8eed87f9dd56939c38f29240e61ce7e90401583b6c86dbd23787dafa5a05f9aa620e964839cf998cd0172c9117cc29ef2b5d2dad96b0d387980cf30660bb420543e83f1e2fb179c7ccb80885dba90fabcfd5187c4fe48964ca134fe4598b281caa3", 0x85}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)="530783982826008b6fd7226cb72e61e9f0a8ffff3d8da6", 0x17}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x33, 0x1, 0x0, [{@multicast2, 0x9}, {@multicast2}]}, @cipso={0x86, 0x37, 0x3, [{0x1, 0x6, "171fa24b"}, {0x7, 0x8, "67adb66a6238"}, {0x6, 0xd, "7dcde74d25055fefa8d03e"}, {0x7, 0x5, "be7355"}, {0x6, 0x11, "9923d4ab55920a8361e1d030e5466f"}]}]}}}], 0x98}}], 0x2, 0x0) recvmsg(r1, &(0x7f0000008ac0)={0x0, 0x0, &(0x7f0000006380)=[{&(0x7f0000009140)=""/132, 0x84}], 0x1}, 0x102) 3.151849588s ago: executing program 3 (id=1228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001440)={0x144, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{}, 0x9, @default, 0x0, @void, @void, @void, @val={0x4, 0x6, {0x10}}, @void, @void, @val={0x25, 0x3}, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x6}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x6, 0x80, [@supported_rates]}, @NL80211_ATTR_PROBE_RESP={0xab, 0x91, "c5dade660623a8d5bd5531159223c9907c30f115236ade55e41c2130081987e8123b8476fc109bd56d3aeb3dee05d5b6b10008471f7eec8435ac1bd6db192bebfb79533a83fc284247f119aa308468fab75e39dc0e41257832db9f4ee7ced0539e33ba50db8d1f0545e98d7d91e09199abe42f081e892838a60f2cf39f09a4852a50a033bd84d80bd6d2aa635ee635d693d51d3c9426f65721e293c983e47403781efc5e3e4ad7"}]]}, 0x144}}, 0x0) 2.859936934s ago: executing program 3 (id=1229): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @remote}, 0x10) 2.437851468s ago: executing program 2 (id=1230): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {0x80000}]}, @var]}, {0x0, [0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x75}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 2.317013804s ago: executing program 3 (id=1231): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bridge\x00', 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000200)={@random="5b1a073f2511", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xff, 0x11, 0x0, @empty, @multicast1}, {0x18, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x5}}}}}}, 0x0) 2.09984934s ago: executing program 1 (id=1232): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000180)={@dev, @random, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast2}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002600)={0x0, [], 0x80, "0c1637538461c9"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x12, 0x32, 0x2, 0x3, 0x0, 0x0, 0x0, @in, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, &(0x7f00000001c0), 0xfffffffffffffc91) r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '!/\x00'}}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xa4200, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000980)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581d3b3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.099505719s ago: executing program 3 (id=1233): sched_yield() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x8100, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) accept4(r3, 0x0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x21}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000001a80)={0x0, 0x0, 0x0, {0x0, 0x0, 0x40}}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="80040001"], 0x28}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x20004000, &(0x7f0000000140)={0x2, 0x4e23, @remote}, 0x10) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001600)={0x6, 0x0, [{0x0, 0x6d, &(0x7f0000000300)=""/109}, {0x2, 0x41, &(0x7f0000001700)=""/65}, {0x1, 0x0, 0x0}, {0xd000, 0x4f, &(0x7f0000000540)=""/79}, {0x10001, 0x1000, &(0x7f00000005c0)=""/4096}, {0xf000, 0x2a, &(0x7f00000015c0)=""/42}]}) r7 = eventfd2(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x0, r7}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r1, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 1.996967511s ago: executing program 4 (id=1234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000000)="65f3a40f01c266b9800000c00f326635000100000f300fc77b0e640fdad4b800008ed80fc7b00020baf80c66b87a53d08766efbafc0cb072ee0f225d0f005000"}], 0x5f0e089eda4e066, 0x0, 0x0, 0x38) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.648536071s ago: executing program 4 (id=1235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x2, 0xf000, 0x2000, &(0x7f0000f99000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) 1.174610186s ago: executing program 4 (id=1236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0xbd, 0x1, r1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000300), 0x20000000}, 0x20) close(r0) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000300)={r2, &(0x7f0000000240), 0x0}, 0x20) 1.054878245s ago: executing program 4 (id=1237): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4188aec6, &(0x7f00000012c0)={0x0, 0x0, @ioapic}) 424.346333ms ago: executing program 1 (id=1238): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='kmem_cache_free\x00', r1}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xb0, 0xb1, 0xf1, 0x8, 0x54c, 0x69, 0xa8d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4b, 0xdd, 0x13}}]}}]}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) set_robust_list(&(0x7f0000000500), 0x18) 0s ago: executing program 4 (id=1239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) close(r0) socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/124, 0x7c}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) kernel console output (not intermixed with test programs): 0 port 6081 - 0 [ 266.372120][ T8614] tipc: Started in network mode [ 266.387512][ T8614] tipc: Node identity , cluster identity 4711 [ 266.411112][ T8614] tipc: Failed to set node id, please configure manually [ 266.436225][ T8614] tipc: Enabling of bearer rejected, failed to enable media [ 266.546429][ T7262] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.713079][ T5281] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 266.721832][ T7262] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.886670][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 266.900131][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 266.911110][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 266.913865][ T5281] usb 2-1: Using ep0 maxpacket: 32 [ 266.928343][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 266.938769][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 266.946106][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 267.008543][ T8625] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 267.054804][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.102986][ T51] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 267.131536][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.145026][ T7262] bridge_slave_1: left allmulticast mode [ 267.166014][ T7262] bridge_slave_1: left promiscuous mode [ 267.192660][ T5281] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 267.205887][ T7262] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.232761][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.257607][ T7262] bridge_slave_0: left allmulticast mode [ 267.290264][ T7262] bridge_slave_0: left promiscuous mode [ 267.303274][ T5281] usb 2-1: config 0 descriptor?? [ 267.315198][ T51] usb 3-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 267.325544][ T7262] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.341206][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.368462][ T51] usb 3-1: config 0 descriptor?? [ 267.395573][ T51] usb-storage 3-1:0.0: USB Mass Storage device detected [ 267.493481][ T5283] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 267.701712][ T5283] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 267.736034][ T4625] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 267.742682][ T5283] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.765655][ T5283] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 267.775547][ T5283] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.776234][ T5281] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 267.789999][ T5283] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 267.813281][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 267.837423][ T5283] usb 4-1: Product: syz [ 267.901749][ T5283] usb 4-1: Manufacturer: syz [ 267.964221][ T5281] ft260 0003:0403:6030.0007: failed to retrieve chip version [ 268.004420][ T5283] cdc_wdm 4-1:1.0: skipping garbage [ 268.010899][ T5283] cdc_wdm 4-1:1.0: skipping garbage [ 268.028078][ T5281] ft260 0003:0403:6030.0007: probe with driver ft260 failed with error -71 [ 268.051426][ T5283] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 268.057762][ T5283] cdc_wdm 4-1:1.0: Unknown control protocol [ 268.126521][ T5281] usb 2-1: USB disconnect, device number 23 [ 268.219118][ T5283] usb 4-1: USB disconnect, device number 21 [ 268.912992][ T5301] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 268.953066][ T7262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.979955][ T7262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.999457][ T7262] bond0 (unregistering): Released all slaves [ 269.013021][ T4625] Bluetooth: hci2: command tx timeout [ 269.029617][ T7262] bond1 (unregistering): Released all slaves [ 269.116774][ T5301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.154965][ T5301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.185290][ T5301] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 269.216158][ T5301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.258383][ T5301] usb 2-1: config 0 descriptor?? [ 269.635384][ T7262] hsr_slave_0: left promiscuous mode [ 269.650937][ T7262] hsr_slave_1: left promiscuous mode [ 269.667469][ T7262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.693031][ T7262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.729856][ T7262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.739897][ T7262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.749642][ T5301] zydacron 0003:13EC:0006.0008: unknown main item tag 0x0 [ 269.758141][ T5301] zydacron 0003:13EC:0006.0008: unknown main item tag 0x0 [ 269.779913][ T5301] zydacron 0003:13EC:0006.0008: unknown main item tag 0x0 [ 269.809444][ T5301] zydacron 0003:13EC:0006.0008: unknown main item tag 0x0 [ 269.827366][ T7262] veth1_macvtap: left promiscuous mode [ 269.840262][ T5301] zydacron 0003:13EC:0006.0008: unknown main item tag 0x0 [ 269.853655][ T51] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 269.858511][ T7262] veth0_macvtap: left promiscuous mode [ 269.873063][ T5283] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 269.874387][ T5301] zydacron 0003:13EC:0006.0008: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.1-1/input0 [ 269.903710][ T7262] veth1_vlan: left promiscuous mode [ 269.909111][ T7262] veth0_vlan: left promiscuous mode [ 269.993248][ T25] usb 3-1: USB disconnect, device number 30 [ 270.060696][ T5960] usb 2-1: USB disconnect, device number 24 [ 270.104369][ T51] usb 4-1: Using ep0 maxpacket: 32 [ 270.109671][ T5283] usb 5-1: Using ep0 maxpacket: 16 [ 270.117463][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.147302][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.168471][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.186242][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.210774][ T51] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 270.221451][ T5283] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.243068][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.256862][ T51] usb 4-1: config 0 descriptor?? [ 270.272446][ T5283] usb 5-1: New USB device found, idVendor=056a, idProduct=2a22, bcdDevice=32.49 [ 270.299770][ T5283] usb 5-1: New USB device strings: Mfr=132, Product=0, SerialNumber=0 [ 270.321448][ T5283] usb 5-1: Manufacturer: syz [ 270.347915][ T5283] usb 5-1: config 0 descriptor?? [ 270.698434][ T51] uclogic 0003:28BD:0094.0009: interface is invalid, ignoring [ 270.831885][ T5283] wacom 0003:056A:2A22.000A: unbalanced delimiter at end of report description [ 270.858969][ T5283] wacom 0003:056A:2A22.000A: parse failed [ 270.886839][ T5283] wacom 0003:056A:2A22.000A: probe with driver wacom failed with error -22 [ 270.913675][ T5284] usb 4-1: USB disconnect, device number 22 [ 271.060257][ T5301] usb 5-1: USB disconnect, device number 26 [ 271.093953][ T4625] Bluetooth: hci2: command tx timeout [ 271.104556][ T5281] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 271.310215][ T5281] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 271.320787][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.332085][ T5281] usb 2-1: Product: syz [ 271.340672][ T5281] usb 2-1: Manufacturer: syz [ 271.345923][ T5281] usb 2-1: SerialNumber: syz [ 271.382160][ T5281] usb 2-1: config 0 descriptor?? [ 271.437864][ T7262] team0 (unregistering): Port device team_slave_1 removed [ 271.628793][ T8691] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 271.878563][ T8689] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 272.054290][ T5301] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 272.181726][ T5281] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 272.270159][ T5301] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 272.291694][ T5301] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.323081][ T5301] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 272.339778][ T5301] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.381175][ T5301] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 272.399910][ T5301] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 272.410023][ T5301] usb 4-1: Product: syz [ 272.420020][ T5301] usb 4-1: Manufacturer: syz [ 272.449725][ T5301] cdc_wdm 4-1:1.0: skipping garbage [ 272.464128][ T5301] cdc_wdm 4-1:1.0: skipping garbage [ 272.488303][ T5301] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 272.506991][ T5301] cdc_wdm 4-1:1.0: Unknown control protocol [ 272.652243][ T51] usb 4-1: USB disconnect, device number 23 [ 272.778923][ T8696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.627'. [ 272.939988][ T8699] Invalid logical block size (17) [ 273.129335][ T8627] chnl_net:caif_netlink_parms(): no params data found [ 273.174184][ T4625] Bluetooth: hci2: command tx timeout [ 273.607132][ T8627] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.615595][ T7262] IPVS: stop unused estimator thread 0... [ 273.639111][ T8627] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.684214][ T8627] bridge_slave_0: entered allmulticast mode [ 273.724900][ T8627] bridge_slave_0: entered promiscuous mode [ 273.753280][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.635'. [ 273.764078][ T8627] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.803006][ T5283] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 273.804301][ T8627] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.881646][ T8627] bridge_slave_1: entered allmulticast mode [ 273.901265][ T8627] bridge_slave_1: entered promiscuous mode [ 274.009337][ T8627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.047885][ T5283] usb 5-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 274.072039][ T8627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.082575][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.094774][ T5301] usb 2-1: USB disconnect, device number 25 [ 274.136013][ T5283] usb 5-1: config 0 descriptor?? [ 274.192294][ T5283] usb-storage 5-1:0.0: USB Mass Storage device detected [ 274.457790][ T8627] team0: Port device team_slave_0 added [ 274.480364][ T8627] team0: Port device team_slave_1 added [ 274.491574][ T8741] netlink: 32 bytes leftover after parsing attributes in process `syz.2.639'. [ 274.505178][ T8741] netlink: 32 bytes leftover after parsing attributes in process `syz.2.639'. [ 274.652207][ T8627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.695339][ T8627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.820691][ T8627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.885213][ T8627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.905835][ T8627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.951219][ T8627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.254984][ T4625] Bluetooth: hci2: command tx timeout [ 275.334847][ T8627] hsr_slave_0: entered promiscuous mode [ 275.347294][ T8627] hsr_slave_1: entered promiscuous mode [ 275.365678][ T8627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.381164][ T8627] Cannot create hsr debugfs directory [ 276.253818][ T8793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.652'. [ 276.298575][ T8793] hsr0: entered promiscuous mode [ 276.553479][ T5281] usb 5-1: USB disconnect, device number 27 [ 276.753127][ T5960] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 276.911402][ T8817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.659'. [ 276.974570][ T5960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.012265][ T5960] usb 3-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 277.073050][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.104054][ T5960] usb 3-1: config 0 descriptor?? [ 277.219074][ T8627] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 277.253677][ T8627] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 277.281532][ T8627] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 277.319899][ T8627] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 277.581591][ T5960] hid-steam 0003:28DE:1205.000B: : USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.2-1/input0 [ 277.731702][ T8627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.765839][ T5960] hid-steam 0003:28DE:1205.000B: Steam Controller 'XXXXXXXXXX' connected [ 277.821892][ T8627] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.829912][ T5960] input: Steam Deck as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1205.000B/input/input17 [ 277.905787][ T7257] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.913025][ T7257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.914642][ T5960] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1205.000B/input/input18 [ 277.975646][ T4429] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.982784][ T4429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.191514][ T5960] hid-steam 0003:28DE:1205.000C: hidraw0: USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.2-1/input0 [ 278.332301][ T5960] usb 3-1: USB disconnect, device number 31 [ 278.355198][ T8627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.568934][ T5960] hid-steam 0003:28DE:1205.000B: Steam Controller 'XXXXXXXXXX' disconnected [ 278.580910][ T8627] veth0_vlan: entered promiscuous mode [ 278.681894][ T8627] veth1_vlan: entered promiscuous mode [ 278.842765][ T8627] veth0_macvtap: entered promiscuous mode [ 278.908272][ T8627] veth1_macvtap: entered promiscuous mode [ 278.969714][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.009765][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.036840][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.069515][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.102054][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.132263][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.163832][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.197096][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.228873][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.233113][ T5284] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 279.250071][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.274622][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.295614][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.322352][ T8627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.359248][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.363837][ T5281] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 279.389252][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.418041][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.443560][ T5284] usb 2-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 279.457303][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.464505][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.470460][ T5284] usb 2-1: config 0 descriptor?? [ 279.502417][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.511316][ T5284] usb-storage 2-1:0.0: USB Mass Storage device detected [ 279.550478][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.560884][ T25] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 279.583476][ T5281] usb 5-1: Using ep0 maxpacket: 8 [ 279.584798][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.604253][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.632487][ T5281] usb 5-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 279.634635][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.661058][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.670890][ T5281] usb 5-1: Product: syz [ 279.675571][ T5281] usb 5-1: Manufacturer: syz [ 279.676839][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.680450][ T5281] usb 5-1: SerialNumber: syz [ 279.730093][ T5281] usb 5-1: config 0 descriptor?? [ 279.764893][ T25] usb 4-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 279.771920][ T5281] gspca_main: spca500-2.14.0 probing 046d:0900 [ 279.780415][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.813707][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.840731][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.853545][ T25] usb 4-1: config 0 descriptor?? [ 279.869674][ T8627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.884241][ T25] usb-storage 4-1:0.0: USB Mass Storage device detected [ 279.923396][ T8627] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.942225][ T8627] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.986783][ T8627] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.025510][ T8627] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.207367][ T5281] gspca_spca500: reg write: error -71 [ 280.249468][ T5281] gspca_spca500: reg write: error -71 [ 280.283329][ T5281] gspca_spca500: reg write: error -71 [ 280.306829][ T5281] gspca_spca500: reg write: error -71 [ 280.342487][ T7262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.363163][ T5960] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 280.376392][ T7262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.414563][ T5281] gspca_spca500: reg write: error -71 [ 280.437896][ T5281] gspca_spca500: reg write: error -71 [ 280.453828][ T5281] gspca_spca500: reg write: error -71 [ 280.475100][ T5281] gspca_spca500: reg write: error -71 [ 280.476393][ T7262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.496121][ T5281] gspca_spca500: reg write: error -71 [ 280.521304][ T7262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.522153][ T5281] gspca_spca500: reg write: error -71 [ 280.584527][ T5960] usb 3-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 280.604285][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.631521][ T5960] usb 3-1: config 0 descriptor?? [ 280.644455][ T5281] gspca_spca500: reg write: error -71 [ 280.666363][ T5960] usb-storage 3-1:0.0: USB Mass Storage device detected [ 280.700835][ T5281] gspca_spca500: reg write: error -71 [ 280.782021][ T5281] gspca_spca500: reg write: error -71 [ 280.888084][ T5281] usb 5-1: USB disconnect, device number 28 [ 281.090692][ T5301] IPVS: starting estimator thread 0... [ 281.182997][ T8910] IPVS: using max 33 ests per chain, 79200 per kthread [ 281.206084][ T25] usb 4-1: USB disconnect, device number 24 [ 282.190036][ T25] usb 2-1: USB disconnect, device number 26 [ 282.372994][ T5307] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 282.505644][ T8943] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 282.605656][ T5307] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 282.653857][ T5307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.700839][ T5307] usb 4-1: config 0 descriptor?? [ 282.767516][ T5307] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 282.943032][ T51] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 283.070073][ T5281] usb 3-1: USB disconnect, device number 32 [ 283.225926][ T51] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 283.249751][ T51] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.275839][ T51] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 283.301748][ T51] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.324117][ T51] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 283.353244][ T51] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 283.371618][ T51] usb 5-1: Product: syz [ 283.372699][ T5307] gspca_cpia1: usb_control_msg 01, error -71 [ 283.402931][ T51] usb 5-1: Manufacturer: syz [ 283.408696][ T5307] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 283.443350][ T51] cdc_wdm 5-1:1.0: skipping garbage [ 283.453716][ T5307] usb 4-1: USB disconnect, device number 25 [ 283.469960][ T51] cdc_wdm 5-1:1.0: skipping garbage [ 283.480438][ T51] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 283.513013][ T51] cdc_wdm 5-1:1.0: Unknown control protocol [ 283.563869][ T5281] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 283.648293][ T5283] usb 5-1: USB disconnect, device number 29 [ 283.755199][ T5281] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.782552][ T5281] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 283.800683][ T5281] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 283.831647][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 283.866186][ T5281] usb 3-1: SerialNumber: syz [ 283.949920][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'. [ 284.097332][ T8980] tap0: tun_chr_ioctl cmd 1074025672 [ 284.115454][ T8980] tap0: ignored: set checksum enabled [ 284.129001][ T5281] usb 3-1: 0:2 : does not exist [ 284.251285][ T5281] usb 3-1: USB disconnect, device number 33 [ 284.343371][ T5513] udevd[5513]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.556699][ T5301] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 284.776010][ T5301] usb 2-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 284.800850][ T5301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.820854][ T5301] usb 2-1: config 0 descriptor?? [ 284.859152][ T5301] usb-storage 2-1:0.0: USB Mass Storage device detected [ 285.293094][ T51] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 285.505391][ T51] usb 5-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 285.538390][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.588896][ T51] usb 5-1: config 0 descriptor?? [ 285.640360][ T51] usb-storage 5-1:0.0: USB Mass Storage device detected [ 285.868192][ T51] usb 2-1: USB disconnect, device number 27 [ 286.823906][ T25] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 287.068071][ T25] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 287.106276][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.141012][ T25] usb 3-1: Product: syz [ 287.163256][ T25] usb 3-1: Manufacturer: syz [ 287.185011][ T25] usb 3-1: SerialNumber: syz [ 287.199399][ T25] usb 3-1: config 0 descriptor?? [ 287.644002][ T25] usb 3-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 287.694232][ T25] usb 3-1: Firmware version (0.0) predates our first public release. [ 287.711200][ T25] usb 3-1: Please update to version 0.2 or newer [ 287.880014][ T5283] usb 5-1: USB disconnect, device number 30 [ 287.886134][ T940] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 287.917625][ T5301] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 288.003868][ T25] usb 3-1: USB disconnect, device number 34 [ 288.103059][ T940] usb 4-1: Using ep0 maxpacket: 8 [ 288.128048][ T940] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 288.131937][ T5301] usb 2-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 288.148339][ T940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.170993][ T940] usb 4-1: Product: syz [ 288.183534][ T940] usb 4-1: Manufacturer: syz [ 288.188354][ T940] usb 4-1: SerialNumber: syz [ 288.188939][ T5301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.222241][ T940] usb 4-1: config 0 descriptor?? [ 288.230564][ T940] gspca_main: se401-2.14.0 probing 047d:5003 [ 288.232908][ T5301] usb 2-1: config 0 descriptor?? [ 288.254791][ T9104] netlink: 36 bytes leftover after parsing attributes in process `syz.0.715'. [ 288.268572][ T5301] usb-storage 2-1:0.0: USB Mass Storage device detected [ 288.382104][ T9108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.716'. [ 288.560682][ T9113] macsec1: entered promiscuous mode [ 288.580514][ T9113] macsec1: entered allmulticast mode [ 288.754438][ T25] usb 2-1: USB disconnect, device number 28 [ 289.204200][ T940] usb 4-1: reset high-speed USB device number 26 using dummy_hcd [ 289.274406][ T5283] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 289.498851][ T5283] usb 5-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 289.516205][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.539166][ T5283] usb 5-1: config 0 descriptor?? [ 289.580730][ T5283] usb-storage 5-1:0.0: USB Mass Storage device detected [ 289.898418][ T940] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 289.914399][ T940] se401 4-1:0.0: probe with driver se401 failed with error -71 [ 289.948772][ T940] usb 4-1: USB disconnect, device number 26 [ 289.973445][ T9144] netlink: 'syz.1.729': attribute type 10 has an invalid length. [ 290.014211][ T9144] syz_tun: entered promiscuous mode [ 290.058802][ T9144] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 290.933211][ T5281] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 291.124524][ T940] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 291.149208][ T5281] usb 3-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 291.183258][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.242179][ T5281] usb 3-1: config 0 descriptor?? [ 291.281996][ T5281] usb-storage 3-1:0.0: USB Mass Storage device detected [ 291.375432][ T940] usb 4-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 291.417523][ T940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.563072][ T940] usb 4-1: config 0 descriptor?? [ 291.589214][ T940] usb-storage 4-1:0.0: USB Mass Storage device detected [ 292.039790][ T5301] usb 5-1: USB disconnect, device number 31 [ 292.151891][ T9189] Â: renamed from pim6reg1 [ 292.292545][ T9193] sch_tbf: burst 0 is lower than device netdevsim0 mtu (1514) ! [ 292.387453][ T5281] usb 4-1: USB disconnect, device number 27 [ 293.716921][ T25] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 293.743764][ T5281] usb 3-1: USB disconnect, device number 35 [ 293.988563][ T25] usb 2-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 294.023099][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.050084][ T25] usb 2-1: config 0 descriptor?? [ 294.084970][ T25] usb-storage 2-1:0.0: USB Mass Storage device detected [ 294.409683][ T9231] team0: Port device macvlan2 added [ 295.049818][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.767'. [ 295.103636][ T5301] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 295.330888][ T5301] usb 3-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 295.360413][ T5301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.416016][ T5301] usb 3-1: config 0 descriptor?? [ 295.442829][ T5301] usb-storage 3-1:0.0: USB Mass Storage device detected [ 295.758800][ T9268] pimreg3: entered allmulticast mode [ 296.494878][ T5283] usb 2-1: USB disconnect, device number 29 [ 297.230651][ T9312] netlink: 'syz.0.790': attribute type 4 has an invalid length. [ 297.889226][ T5301] usb 3-1: USB disconnect, device number 36 [ 298.125627][ T9331] netlink: 'syz.4.797': attribute type 1 has an invalid length. [ 298.141513][ T9331] netlink: 'syz.4.797': attribute type 2 has an invalid length. [ 298.563257][ T5283] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 298.613734][ T940] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 298.640951][ T9346] program syz.0.803 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.694073][ T9348] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 298.786074][ T5283] usb 4-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 298.796076][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.809590][ T5283] usb 4-1: config 0 descriptor?? [ 298.822508][ T5283] usb-storage 4-1:0.0: USB Mass Storage device detected [ 298.829652][ T940] usb 5-1: Using ep0 maxpacket: 8 [ 298.838352][ T940] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.854950][ T940] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 298.868219][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.884186][ T940] usb 5-1: config 0 descriptor?? [ 298.896498][ T940] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 298.934937][ C1] sd 0:0:1:0: [sda] tag#1478 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 298.945385][ C1] sd 0:0:1:0: [sda] tag#1478 CDB: Read(6) 08 00 00 00 00 00 [ 299.180890][ T9358] netlink: 'syz.0.807': attribute type 29 has an invalid length. [ 299.239123][ T9358] netlink: 'syz.0.807': attribute type 29 has an invalid length. [ 299.277423][ T9358] netlink: 'syz.0.807': attribute type 29 has an invalid length. [ 299.495587][ T29] audit: type=1326 audit(1725643440.914:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9370 comm="syz.0.811" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde7917cef9 code=0x0 [ 299.750922][ T940] gspca_vc032x: reg_w err -71 [ 299.756151][ T940] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 299.799123][ T940] usb 5-1: USB disconnect, device number 32 [ 300.703436][ T940] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 300.927479][ T940] usb 5-1: New USB device found, idVendor=1039, idProduct=2121, bcdDevice=9e.ff [ 300.948426][ T940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.978719][ T940] usb 5-1: Product: syz [ 300.992955][ T940] usb 5-1: Manufacturer: syz [ 301.005688][ T940] usb 5-1: SerialNumber: syz [ 301.034831][ T940] usb 5-1: config 0 descriptor?? [ 301.064497][ T940] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2121) Rev (0X9EFF): Eagle II [ 301.156007][ T5283] usb 4-1: USB disconnect, device number 28 [ 301.236920][ T9397] netlink: 616 bytes leftover after parsing attributes in process `syz.3.821'. [ 301.253295][ T940] usb 5-1: reset high-speed USB device number 33 using dummy_hcd [ 301.963217][ T940] usb 5-1: device descriptor read/64, error -71 [ 302.273199][ T940] usb 5-1: reset high-speed USB device number 33 using dummy_hcd [ 302.359336][ T7807] bond0: (slave syz_tun): Releasing backup interface [ 302.526136][ T940] usb 5-1: device firmware changed [ 302.572497][ T940] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 302.605414][ T940] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 302.615126][ T51] usb 5-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 302.635582][ T51] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 302.654845][ T940] usb 5-1: USB disconnect, device number 33 [ 302.679155][ T7259] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.873412][ T940] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 302.919506][ T7259] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.057573][ T7259] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.105443][ T940] usb 5-1: config 0 has no interfaces? [ 303.114753][ T940] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 303.140725][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.166067][ T940] usb 5-1: config 0 descriptor?? [ 303.214937][ T7259] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.327786][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.345136][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.376804][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.388276][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.417118][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 303.435974][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.558836][ T5281] usb 5-1: USB disconnect, device number 34 [ 303.669787][ T9420] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.731156][ T9420] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 303.929998][ T7259] bridge_slave_1: left allmulticast mode [ 303.962489][ T7259] bridge_slave_1: left promiscuous mode [ 303.993412][ T7259] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.009757][ T7259] bridge_slave_0: left allmulticast mode [ 304.042793][ T7259] bridge_slave_0: left promiscuous mode [ 304.052525][ T7259] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.394613][ T5307] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 304.612657][ T5307] usb 4-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 304.659527][ T5307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.717167][ T5307] usb 4-1: config 0 descriptor?? [ 304.744888][ T5307] usb-storage 4-1:0.0: USB Mass Storage device detected [ 305.268685][ T7259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.283935][ T7259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.298732][ T7259] bond0 (unregistering): Released all slaves [ 305.365255][ T9448] tap0: tun_chr_ioctl cmd 2147767521 [ 305.494182][ T9453] netlink: 16 bytes leftover after parsing attributes in process `syz.4.834'. [ 305.573692][ T5238] Bluetooth: hci0: command tx timeout [ 305.884548][ T7259] hsr_slave_0: left promiscuous mode [ 305.891947][ T7259] hsr_slave_1: left promiscuous mode [ 305.900594][ T7259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.909612][ T7259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.920589][ T7259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.930870][ T7259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.064455][ T7259] veth1_macvtap: left promiscuous mode [ 306.070245][ T7259] veth0_macvtap: left promiscuous mode [ 306.083702][ T7259] veth1_vlan: left promiscuous mode [ 306.090134][ T7259] veth0_vlan: left promiscuous mode [ 307.138410][ T5281] usb 4-1: USB disconnect, device number 29 [ 307.299737][ T7259] team0 (unregistering): Port device team_slave_1 removed [ 307.360874][ T7259] team0 (unregistering): Port device team_slave_0 removed [ 307.653520][ T5238] Bluetooth: hci0: command tx timeout [ 308.171568][ T9418] chnl_net:caif_netlink_parms(): no params data found [ 308.433825][ T5307] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 308.520919][ T9418] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.539019][ T9418] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.565657][ T9418] bridge_slave_0: entered allmulticast mode [ 308.578939][ T9418] bridge_slave_0: entered promiscuous mode [ 308.615189][ T9418] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.628006][ T5307] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.639165][ T9418] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.659633][ T5307] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 308.665379][ T9418] bridge_slave_1: entered allmulticast mode [ 308.685478][ T9418] bridge_slave_1: entered promiscuous mode [ 308.705119][ T5307] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 308.733623][ T5307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 308.742005][ T5307] usb 4-1: SerialNumber: syz [ 308.820242][ T9418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.850377][ T9418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.920439][ T9418] team0: Port device team_slave_0 added [ 308.974634][ T9418] team0: Port device team_slave_1 added [ 308.995722][ T5307] usb 4-1: 0:2 : does not exist [ 309.036905][ T5307] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 309.084374][ T5307] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 309.095644][ T7252] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.126890][ T5307] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 309.157414][ T5307] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 309.226810][ T5307] usb 4-1: USB disconnect, device number 30 [ 309.285572][ T4625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 309.303858][ T4625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.307835][ T5513] udevd[5513]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 309.328131][ T4625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 309.338151][ T4625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 309.349787][ T4625] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 309.359157][ T4625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 309.425939][ T7252] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.482314][ T9418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.521932][ T9418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.571965][ T9418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.620630][ T9418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.645723][ T9418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.704017][ T9418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.739348][ T4625] Bluetooth: hci0: command tx timeout [ 309.783227][ T7252] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.934498][ T7252] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.966458][ T5238] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 309.979652][ T5238] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 309.991086][ T5238] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 310.003798][ T5238] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 310.012430][ T5238] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 310.024723][ T5238] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 310.122795][ T9418] hsr_slave_0: entered promiscuous mode [ 310.135720][ T9418] hsr_slave_1: entered promiscuous mode [ 310.168944][ T9418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.188752][ T9418] Cannot create hsr debugfs directory [ 310.273366][ T5281] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 310.499558][ T5281] usb 4-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 310.533686][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.616732][ T5281] usb 4-1: config 0 descriptor?? [ 310.656883][ T5281] usb-storage 4-1:0.0: USB Mass Storage device detected [ 310.715460][ T7252] bridge_slave_1: left allmulticast mode [ 310.735162][ T7252] bridge_slave_1: left promiscuous mode [ 310.766655][ T7252] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.801450][ T7252] bridge_slave_0: left allmulticast mode [ 310.810074][ T7252] bridge_slave_0: left promiscuous mode [ 310.819877][ T7252] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.466380][ T7252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.484156][ T7252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.493037][ T5238] Bluetooth: hci5: command tx timeout [ 311.506314][ T7252] bond0 (unregistering): Released all slaves [ 311.521658][ T7252] bond1 (unregistering): Released all slaves [ 311.666763][ T7252] tipc: Left network mode [ 311.813208][ T5238] Bluetooth: hci0: command tx timeout [ 312.053636][ T5238] Bluetooth: hci6: command tx timeout [ 312.151377][ T7252] hsr_slave_0: left promiscuous mode [ 312.168543][ T7252] hsr_slave_1: left promiscuous mode [ 312.201661][ T7252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.219324][ T7252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.239265][ T7252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.247757][ T7252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.281761][ T7252] veth1_macvtap: left promiscuous mode [ 312.287764][ T7252] veth0_macvtap: left promiscuous mode [ 312.295860][ T7252] veth1_vlan: left promiscuous mode [ 312.301920][ T7252] veth0_vlan: left promiscuous mode [ 312.541598][ T7252] pimreg3 (unregistering): left allmulticast mode [ 312.808649][ T5307] usb 4-1: USB disconnect, device number 31 [ 313.309385][ T7252] team0 (unregistering): Port device team_slave_1 removed [ 313.364466][ T7252] team0 (unregistering): Port device team_slave_0 removed [ 313.583295][ T5238] Bluetooth: hci5: command tx timeout [ 314.013338][ T9519] chnl_net:caif_netlink_parms(): no params data found [ 314.089062][ T9510] chnl_net:caif_netlink_parms(): no params data found [ 314.138154][ T5238] Bluetooth: hci6: command tx timeout [ 314.718804][ T5307] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 314.864686][ T9510] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.871861][ T9510] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.935733][ T5307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.947783][ T9510] bridge_slave_0: entered allmulticast mode [ 314.965059][ T9510] bridge_slave_0: entered promiscuous mode [ 314.972572][ T5307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.983888][ T9519] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.991048][ T9519] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.999135][ T9519] bridge_slave_0: entered allmulticast mode [ 315.005825][ T5307] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 315.016996][ T9519] bridge_slave_0: entered promiscuous mode [ 315.025138][ T5307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.035596][ T9519] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.043572][ T9519] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.050829][ T9519] bridge_slave_1: entered allmulticast mode [ 315.059051][ T5307] usb 4-1: config 0 descriptor?? [ 315.070662][ T9519] bridge_slave_1: entered promiscuous mode [ 315.083227][ T9510] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.095005][ T7252] IPVS: stop unused estimator thread 0... [ 315.099877][ T9510] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.112786][ T9510] bridge_slave_1: entered allmulticast mode [ 315.125820][ T9510] bridge_slave_1: entered promiscuous mode [ 315.269251][ T9593] netlink: 844 bytes leftover after parsing attributes in process `syz.0.859'. [ 315.280456][ T9593] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 315.302564][ T9519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.326326][ T9519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.366825][ T9510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.416714][ T9510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.501130][ T5307] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 315.512755][ T5307] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 315.551424][ T5307] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.000D/input/input19 [ 315.595068][ T9510] team0: Port device team_slave_0 added [ 315.610784][ T9418] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 315.638420][ T5307] cm6533_jd 0003:0D8C:0022.000D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 315.653785][ T5238] Bluetooth: hci5: command tx timeout [ 315.658950][ T9519] team0: Port device team_slave_0 added [ 315.670190][ T9510] team0: Port device team_slave_1 added [ 315.679669][ T9418] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 315.756319][ T9519] team0: Port device team_slave_1 added [ 315.800893][ T5283] usb 4-1: USB disconnect, device number 32 [ 315.821116][ T9418] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 315.898953][ T9510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.907252][ T9510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.936036][ T9510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.948774][ T9418] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 315.962273][ T9519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.982373][ T9519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.009203][ T9519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.027966][ T9510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.051075][ T9510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.097633][ T9510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.124904][ T9519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.131878][ T9519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.159683][ T9519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.207659][ T29] audit: type=1326 audit(1725643457.614:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9605 comm="syz.0.864" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde7917cef9 code=0x0 [ 316.237325][ T5238] Bluetooth: hci6: command tx timeout [ 316.289625][ T9510] hsr_slave_0: entered promiscuous mode [ 316.304669][ T9510] hsr_slave_1: entered promiscuous mode [ 316.318673][ T9510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.326643][ T9510] Cannot create hsr debugfs directory [ 316.368362][ T9519] hsr_slave_0: entered promiscuous mode [ 316.379785][ T9519] hsr_slave_1: entered promiscuous mode [ 316.398619][ T9519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.407745][ T9519] Cannot create hsr debugfs directory [ 317.222033][ T9418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.269362][ T9418] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.297373][ T7259] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.304595][ T7259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.352456][ T3126] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.359686][ T3126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.507938][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.515990][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.554374][ T9510] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 317.561211][ T9640] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 317.668625][ T9519] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.699320][ T9510] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 317.717441][ T9510] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 317.731737][ T9510] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 317.743320][ T5238] Bluetooth: hci5: command tx timeout [ 317.838389][ T9519] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.985699][ T9519] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.027564][ T9418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.094432][ T9519] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.222989][ T25] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 318.281629][ T9418] veth0_vlan: entered promiscuous mode [ 318.302356][ T5238] Bluetooth: hci6: command tx timeout [ 318.339498][ T9418] veth1_vlan: entered promiscuous mode [ 318.445361][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 318.495064][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 318.512332][ T9519] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 318.514171][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.530481][ T25] usb 4-1: Product: syz [ 318.535196][ T25] usb 4-1: Manufacturer: syz [ 318.540058][ T25] usb 4-1: SerialNumber: syz [ 318.540207][ T9510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.554638][ T25] cdc_ncm 4-1:1.0: skipping garbage [ 318.579357][ T9519] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 318.620667][ T9418] veth0_macvtap: entered promiscuous mode [ 318.643605][ T9519] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 318.655368][ T9519] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 318.677157][ T9510] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.688731][ T9418] veth1_macvtap: entered promiscuous mode [ 318.722902][ T4429] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.730173][ T4429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.784383][ T7252] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.791589][ T7252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.877298][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.891290][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.902904][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.915759][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.926431][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.937823][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.948664][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.960824][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.972271][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.984226][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.996746][ T9418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.017894][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.033223][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.055638][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.072884][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.093410][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.114791][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.135285][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.157490][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.174224][ T9418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.192903][ T9418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.217406][ T9418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.292903][ T9418] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.315610][ T9418] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.331386][ T9418] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.361608][ T9418] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.577649][ T3126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.604814][ T3126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.619061][ T25] cdc_ncm 4-1:1.0: bind() failure [ 319.634716][ T9510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.640560][ T25] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 319.678042][ T25] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 319.694423][ T25] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 319.747048][ T7252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.757667][ T25] usb 4-1: USB disconnect, device number 33 [ 319.774497][ T7252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.804164][ T9519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.900862][ T9519] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.925962][ T9510] veth0_vlan: entered promiscuous mode [ 319.953189][ T7252] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.960359][ T7252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.026060][ T7252] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.033275][ T7252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.116825][ T9510] veth1_vlan: entered promiscuous mode [ 320.289009][ T9510] veth0_macvtap: entered promiscuous mode [ 320.335932][ T9510] veth1_macvtap: entered promiscuous mode [ 320.406096][ T9519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.524866][ T9510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.547316][ T9510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.590750][ T9510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.609642][ T9510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.622099][ T9510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.680017][ T9510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.690842][ T9510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.706209][ T9510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.719041][ T9510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.737407][ T9510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.813721][ T9510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.845654][ T9510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.900572][ T9510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.968005][ T9510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.009222][ T9510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.040393][ T9510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.060263][ T9510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.085579][ T9510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.113995][ T9510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.137163][ T9510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.179085][ T9510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.205178][ T9510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.220002][ T9510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.240689][ T9510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.282158][ T9510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.321826][ T9510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.453616][ T9510] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.476656][ T9510] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.515867][ T9510] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.542928][ T9510] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.748484][ T9519] veth0_vlan: entered promiscuous mode [ 321.802466][ T9519] veth1_vlan: entered promiscuous mode [ 321.944701][ T7262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.993206][ T7262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.060064][ T9519] veth0_macvtap: entered promiscuous mode [ 322.083863][ T58] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 322.109838][ T7252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.121728][ T9519] veth1_macvtap: entered promiscuous mode [ 322.142221][ T7252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.203677][ T9519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.215142][ T9519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.225948][ T9519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.237926][ T9519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.258383][ T9519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.279827][ T9519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.301655][ T58] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 322.313313][ T9519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.333325][ T58] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.353710][ T9519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.365232][ T58] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 322.387895][ T9519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.405240][ T58] usb 4-1: config 1 has no interface number 1 [ 322.421768][ T58] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 322.440027][ T9519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.450808][ T9519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.471197][ T58] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 322.488220][ T9519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.499085][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.525327][ T58] usb 4-1: Product: syz [ 322.533719][ T9519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.555153][ T58] usb 4-1: Manufacturer: syz [ 322.559810][ T58] usb 4-1: SerialNumber: syz [ 322.572697][ T9519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.587323][ T9519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.656527][ T9519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.740508][ T9519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.764886][ T9519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.782267][ T9519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.793076][ T9519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.813281][ T9519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.861799][ T9519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.902700][ T9519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.906283][ T58] usb 4-1: USB disconnect, device number 34 [ 322.978374][ T5513] udevd[5513]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 323.009319][ T9519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.050488][ T9519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.079915][ T9519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.102813][ T9519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.126481][ T9519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.180329][ T9519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.240282][ T9519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.326357][ T9519] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.363657][ T9519] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.372452][ T9519] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.423142][ T9519] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.740708][ T9767] netlink: 'syz.1.885': attribute type 10 has an invalid length. [ 323.785072][ T9767] geneve0: entered promiscuous mode [ 323.846339][ T9767] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 323.918567][ T7259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.952502][ T9772] bond0: entered promiscuous mode [ 323.952968][ T7259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.988793][ T9772] bond_slave_0: entered promiscuous mode [ 324.006169][ T9772] bond_slave_1: entered promiscuous mode [ 324.117403][ T4429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.149993][ T4429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.284564][ T9786] bridge0: port 3(netdevsim0) entered blocking state [ 324.316182][ T9786] bridge0: port 3(netdevsim0) entered disabled state [ 324.348573][ T9786] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 324.377329][ T9786] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 324.395009][ T9786] bridge0: port 3(netdevsim0) entered blocking state [ 324.404446][ T9786] bridge0: port 3(netdevsim0) entered forwarding state [ 325.085058][ T9818] netlink: 'syz.2.901': attribute type 12 has an invalid length. [ 325.114394][ T9818] netlink: 132 bytes leftover after parsing attributes in process `syz.2.901'. [ 325.818418][ T9845] netlink: 'syz.1.910': attribute type 29 has an invalid length. [ 325.863800][ T9845] netlink: 'syz.1.910': attribute type 29 has an invalid length. [ 325.892195][ T9845] netlink: 'syz.1.910': attribute type 29 has an invalid length. [ 325.933680][ T9845] netlink: 'syz.1.910': attribute type 29 has an invalid length. [ 326.517161][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.916'. [ 326.536824][ T9869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.555901][ T9869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.629316][ T9869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.643642][ T9869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.987350][ T9886] loop2: detected capacity change from 0 to 7 [ 327.009189][ T9886] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 327.025626][ T9886] loop2: partition table partially beyond EOD, truncated [ 327.062104][ T9886] loop2: p1 size 6333 extends beyond EOD, truncated [ 327.116751][ T5238] Bluetooth: hci5: unexpected event 0x31 length: 23 > 6 [ 329.505652][ T9938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 330.075562][ T9954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.951'. [ 330.326391][ T9961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.952'. [ 330.413065][ T5282] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 330.618415][ T5282] usb 2-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 330.648065][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.678617][ T5282] usb 2-1: config 0 descriptor?? [ 330.703577][ T5282] usb-storage 2-1:0.0: USB Mass Storage device detected [ 331.111294][ T9979] netlink: 'syz.4.958': attribute type 2 has an invalid length. [ 331.263288][ T5238] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 331.272688][ T5238] Bluetooth: hci5: Injecting HCI hardware error event [ 331.282261][ T5238] Bluetooth: hci5: hardware error 0x00 [ 332.515312][ T5284] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 332.603065][ T5283] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 332.725288][ T5284] usb 5-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 332.737181][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.772801][ T5284] usb 5-1: config 0 descriptor?? [ 332.787103][ T5284] usb-storage 5-1:0.0: USB Mass Storage device detected [ 332.818434][ T5283] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 332.833312][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.854940][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.869697][ T5283] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 332.891828][ T5283] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 332.901905][ T5283] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 332.911536][ T5283] usb 4-1: Manufacturer: syz [ 332.921222][ T5283] usb 4-1: config 0 descriptor?? [ 333.186107][ T5284] usb 2-1: USB disconnect, device number 30 [ 333.333295][ T5238] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 333.402477][ T5283] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 333.426900][ T5283] appleir 0003:05AC:8243.000E: No inputs registered, leaving [ 333.461616][ T5283] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 333.642417][T10009] vcan0: entered allmulticast mode [ 333.691742][T10009] vcan0: left allmulticast mode [ 333.738472][T10011] netlink: 'syz.2.970': attribute type 4 has an invalid length. [ 333.752810][ T5283] usb 4-1: USB disconnect, device number 35 [ 334.155405][T10026] warning: `syz.1.976' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 334.184778][ T940] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 334.383634][ T940] usb 3-1: Using ep0 maxpacket: 16 [ 334.410223][ T940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.436975][ T940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.455859][T10035] loop2: detected capacity change from 0 to 7 [ 334.475706][ T940] usb 3-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 334.485829][T10035] Dev loop2: unable to read RDB block 7 [ 334.493727][ T940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.497046][T10035] loop2: AHDI p1 [ 334.514262][ T940] usb 3-1: config 0 descriptor?? [ 334.524985][T10035] loop2: partition table partially beyond EOD, truncated [ 334.993123][ T940] input: HID 28bd:0934 Mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0934.000F/input/input21 [ 335.129742][ T940] uclogic 0003:28BD:0934.000F: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0934] on usb-dummy_hcd.2-1/input0 [ 335.171117][ T940] usb 3-1: USB disconnect, device number 37 [ 335.379584][ T5283] usb 5-1: USB disconnect, device number 35 [ 335.518920][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.988'. [ 335.817027][T10067] netlink: 'syz.4.992': attribute type 11 has an invalid length. [ 336.223124][ T58] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 336.290583][ T7259] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.402458][ T7259] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.414631][ T940] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 336.436362][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.454918][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.490273][ T58] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 336.516186][ T58] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 336.526915][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.540033][ T7259] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.552563][ T58] usb 3-1: config 0 descriptor?? [ 336.613338][ T940] usb 5-1: Using ep0 maxpacket: 32 [ 336.630991][ T940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.648031][ T7259] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.673040][ T940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.710871][ T940] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 336.729406][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.742287][ T940] usb 5-1: config 0 descriptor?? [ 336.759406][ T940] hub 5-1:0.0: USB hub found [ 336.943949][ T7259] bridge_slave_1: left allmulticast mode [ 336.949682][ T7259] bridge_slave_1: left promiscuous mode [ 336.974192][ T7259] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.982523][ T940] hub 5-1:0.0: 1 port detected [ 336.997127][ T58] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 337.015946][ T4625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.031844][ T4625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.044496][ T4625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.052376][ T7259] bridge_slave_0: left allmulticast mode [ 337.061194][ T4625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.069666][ T4625] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 337.078807][ T4625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.089870][ T7259] bridge_slave_0: left promiscuous mode [ 337.120111][ T7259] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.121424][ T58] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 337.179042][ T940] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 337.215550][ T940] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 337.293163][ T940] usbhid 5-1:0.0: can't add hid device: -71 [ 337.299221][ T940] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 337.366737][ T940] usb 5-1: USB disconnect, device number 36 [ 337.442961][ T5282] usb 3-1: USB disconnect, device number 38 [ 337.954591][ T940] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 338.051620][ T7259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.066779][ T7259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.077804][ T7259] bond0 (unregistering): Released all slaves [ 338.166068][ T940] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 338.182992][ T940] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 338.208365][ T940] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 338.243042][ T940] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 338.262971][ T940] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 338.286464][ T7259] IPVS: stopping backup sync thread 8134 ... [ 338.308520][ T940] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 338.329737][ T940] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 338.363277][ T940] usb 2-1: Product: syz [ 338.406329][ T940] usb 2-1: Manufacturer: syz [ 338.455647][ T940] cdc_wdm 2-1:1.0: skipping garbage [ 338.460908][ T940] cdc_wdm 2-1:1.0: skipping garbage [ 338.509042][ T940] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 338.527667][ T940] cdc_wdm 2-1:1.0: Unknown control protocol [ 338.703506][ T7259] hsr_slave_0: left promiscuous mode [ 338.713556][ T7259] hsr_slave_1: left promiscuous mode [ 338.727776][ T7259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.742229][ T7259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.754525][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 338.761319][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 338.767693][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 338.774308][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 338.780612][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 338.787224][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 338.793512][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 338.800095][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 338.806342][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 338.812928][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 338.819170][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 338.825751][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 338.831986][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 338.838578][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 338.844848][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 338.851439][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 338.857664][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 338.864242][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 338.870498][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 338.877077][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 338.884433][ T5282] usb 2-1: USB disconnect, device number 31 [ 338.890358][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 338.923392][ T5307] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 338.923536][ T7259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.960511][ T7259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.061301][ T7259] veth1_macvtap: left promiscuous mode [ 339.073819][ T7259] veth0_macvtap: left promiscuous mode [ 339.089158][ T7259] veth1_vlan: left promiscuous mode [ 339.101564][ T7259] veth0_vlan: left promiscuous mode [ 339.122150][ T5307] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 339.133713][ T5307] usb 3-1: config 1 has no interface number 0 [ 339.155768][ T5307] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.173380][ T5238] Bluetooth: hci1: command tx timeout [ 339.205094][ T5307] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 339.252740][ T5307] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 339.303031][ T940] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 339.307542][ T5307] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 339.340715][ T5307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.362712][ T5307] usb 3-1: Product: syz [ 339.379882][ T5307] usb 3-1: Manufacturer: syz [ 339.393376][ T5307] usb 3-1: SerialNumber: syz [ 339.496312][ T940] usb 5-1: config 0 has no interfaces? [ 339.513922][ T940] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 339.545755][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.589596][ T940] usb 5-1: config 0 descriptor?? [ 339.851765][ T940] usb 5-1: USB disconnect, device number 37 [ 340.183222][ T5282] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 340.283496][ T7259] team0 (unregistering): Port device team_slave_1 removed [ 340.345603][ T5307] cdc_ncm 3-1:1.1: bind() failure [ 340.356198][ T7259] team0 (unregistering): Port device team_slave_0 removed [ 340.401399][ T5282] usb 2-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 340.428262][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.487544][ T5282] usb 2-1: config 0 descriptor?? [ 340.512824][ T5282] usb-storage 2-1:0.0: USB Mass Storage device detected [ 340.699005][ T5301] usb 3-1: USB disconnect, device number 39 [ 341.065158][ T5307] usb 2-1: USB disconnect, device number 32 [ 341.258691][ T5238] Bluetooth: hci1: command tx timeout [ 341.718403][ T5282] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 341.918550][T10088] chnl_net:caif_netlink_parms(): no params data found [ 341.926940][ T5282] usb 5-1: Using ep0 maxpacket: 32 [ 341.956056][ T5282] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 341.981409][ T5282] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 341.998590][ T5282] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 342.019876][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 342.061658][ T5282] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 342.095744][ T5282] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 342.122636][ T5282] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 342.173430][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.194238][T10088] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.212828][ T5282] usb 5-1: config 0 descriptor?? [ 342.229705][T10088] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.263818][ T5307] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 342.273477][T10088] bridge_slave_0: entered allmulticast mode [ 342.286151][T10088] bridge_slave_0: entered promiscuous mode [ 342.327260][T10088] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.338577][T10088] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.355311][T10088] bridge_slave_1: entered allmulticast mode [ 342.362739][T10088] bridge_slave_1: entered promiscuous mode [ 342.434992][ T5282] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 342.457192][ T5307] usb 2-1: Using ep0 maxpacket: 8 [ 342.480068][ T5307] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=18.37 [ 342.491742][T10088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.506478][ T5307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.519547][T10088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.530025][ T5307] usb 2-1: Product: syz [ 342.540443][ T5307] usb 2-1: Manufacturer: syz [ 342.556830][ T7259] IPVS: stop unused estimator thread 0... [ 342.564913][ T5307] usb 2-1: SerialNumber: syz [ 342.590894][ T5307] usb 2-1: config 0 descriptor?? [ 342.636709][ T5307] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 342.651270][ T5307] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 342.665640][ C1] usblp0: nonzero read bulk status received: -71 [ 342.682073][T10088] team0: Port device team_slave_0 added [ 342.682677][ T5282] usb 5-1: USB disconnect, device number 38 [ 342.692204][T10088] team0: Port device team_slave_1 added [ 342.834784][T10088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.842554][T10088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.874547][T10088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.899195][T10159] usblp0: removed [ 342.905922][T10088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.923458][T10088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.995892][T10088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.084286][T10169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.118641][T10169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.154936][ T5307] radio-raremono 2-1:0.0: this is not Thanko's Raremono. [ 343.176278][ T5307] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 343.202309][T10088] hsr_slave_0: entered promiscuous mode [ 343.214301][ T5307] usb 2-1: USB disconnect, device number 33 [ 343.225059][T10088] hsr_slave_1: entered promiscuous mode [ 343.333781][ T5238] Bluetooth: hci1: command tx timeout [ 343.693603][ T5282] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 343.888957][T10216] input: syz0 as /devices/virtual/input/input22 [ 343.907005][ T5282] usb 3-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 343.933224][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.966372][ T5282] usb 3-1: config 0 descriptor?? [ 344.021584][ T5282] usb-storage 3-1:0.0: USB Mass Storage device detected [ 344.043442][ T5301] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 344.283199][ T5301] usb 5-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 344.292277][ T5301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.324844][ T5301] usb 5-1: config 0 descriptor?? [ 344.339569][ T5301] usb-storage 5-1:0.0: USB Mass Storage device detected [ 344.620735][T10231] input: syz1 as /devices/virtual/input/input23 [ 345.146974][T10088] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 345.219822][T10088] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 345.276877][T10088] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 345.353891][T10088] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 345.413217][ T5238] Bluetooth: hci1: command tx timeout [ 345.466513][ T5307] usb 5-1: USB disconnect, device number 39 [ 345.696917][T10088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.771613][T10088] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.811755][ T7252] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.818931][ T7252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.898306][ T7259] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.905652][ T7259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.203939][T10088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.365733][T10088] veth0_vlan: entered promiscuous mode [ 346.369579][ T58] usb 3-1: USB disconnect, device number 40 [ 346.412100][T10088] veth1_vlan: entered promiscuous mode [ 346.473526][ T5307] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 346.538319][T10088] veth0_macvtap: entered promiscuous mode [ 346.589119][T10088] veth1_macvtap: entered promiscuous mode [ 346.665449][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.685450][ T5307] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.696667][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.711167][ T5307] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 346.738115][ T5307] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 346.749954][ T5307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.763891][ T5307] usb 5-1: Product: syz [ 346.764432][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.768314][ T5307] usb 5-1: Manufacturer: syz [ 346.800572][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.814113][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.820883][ T5307] usb 5-1: SerialNumber: syz [ 346.828437][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.851169][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.898357][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.923817][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.959731][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.985186][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.011184][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.048334][T10088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.142728][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.184956][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.222956][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.268867][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.305077][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.306301][ T5307] usb 5-1: USB disconnect, device number 40 [ 347.349114][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.386138][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.415441][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.453356][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.468936][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.485493][T10088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.516605][T10088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.564458][T10088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.716053][T10088] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.735218][T10088] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.751714][T10088] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.762499][T10088] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.056120][ T7267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.084022][ T7267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.179446][ T7257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.204615][T10314] input: syz0 as /devices/virtual/input/input24 [ 348.208510][ T7257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.230225][ T5266] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 348.508362][ T5266] usb 3-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 348.543449][ T5266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.612279][ T5266] usb 3-1: config 0 descriptor?? [ 348.641381][ T5266] usb-storage 3-1:0.0: USB Mass Storage device detected [ 348.718884][T10335] syzkaller1: entered promiscuous mode [ 348.726157][T10335] syzkaller1: entered allmulticast mode [ 349.546212][ T5307] usb 3-1: USB disconnect, device number 41 [ 349.803460][ T940] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 350.005747][ T940] usb 5-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 350.025011][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.045111][T10376] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 350.065372][ T940] usb 5-1: config 0 descriptor?? [ 350.075549][ T940] usb-storage 5-1:0.0: USB Mass Storage device detected [ 350.094947][T10376] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 350.790304][T10403] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 351.132983][ T5266] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 351.163032][ T5281] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 351.325834][ T5266] usb 2-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 351.349445][ T5266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.367478][ T5281] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 351.368579][ T5266] usb 2-1: config 0 descriptor?? [ 351.392009][ T5266] usb-storage 2-1:0.0: USB Mass Storage device detected [ 351.410375][ T5281] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.452008][ T5281] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 351.501837][ T5281] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.541099][ T5281] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 351.563381][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 351.581257][ T5281] usb 3-1: Product: syz [ 351.597927][ T5281] usb 3-1: Manufacturer: syz [ 351.641291][ T5281] cdc_wdm 3-1:1.0: skipping garbage [ 351.655761][ T5281] cdc_wdm 3-1:1.0: skipping garbage [ 351.684475][ T5281] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 351.691571][ T5281] cdc_wdm 3-1:1.0: Unknown control protocol [ 351.880688][ T5281] usb 3-1: USB disconnect, device number 42 [ 352.061363][ T7257] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.207293][ T7257] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.300899][ T7257] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.447832][ T7257] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.767105][ T7257] bridge_slave_1: left allmulticast mode [ 352.786542][ T7257] bridge_slave_1: left promiscuous mode [ 352.825204][ T7257] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.825276][ T5282] usb 5-1: USB disconnect, device number 41 [ 352.885827][ T7257] bridge_slave_0: left allmulticast mode [ 352.896293][ T7257] bridge_slave_0: left promiscuous mode [ 352.902086][ T7257] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.044675][ T4625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 353.055728][ T4625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 353.065783][ T4625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 353.079275][ T4625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 353.089602][ T4625] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 353.100061][ T4625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 353.809013][ T5282] usb 2-1: USB disconnect, device number 34 [ 354.040407][ T7257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.052442][ T7257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.067526][ T7257] bond0 (unregistering): Released all slaves [ 354.820312][ T5281] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 354.903112][ T5266] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 354.904811][ T7257] hsr_slave_0: left promiscuous mode [ 354.968305][ T7257] hsr_slave_1: left promiscuous mode [ 354.989615][ T7257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.052265][ T7257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.085487][ T5281] usb 2-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 355.113512][ T7257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.130241][ T5266] usb 5-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 355.145839][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.173110][ T4625] Bluetooth: hci1: command tx timeout [ 355.180953][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.183652][ T7257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.216309][ T5266] usb 5-1: config 0 descriptor?? [ 355.224495][ T5266] usb-storage 5-1:0.0: USB Mass Storage device detected [ 355.249173][ T5281] usb 2-1: config 0 descriptor?? [ 355.320493][ T5281] usb-storage 2-1:0.0: USB Mass Storage device detected [ 355.421044][ T7257] veth1_macvtap: left promiscuous mode [ 355.427430][ T7257] veth0_macvtap: left promiscuous mode [ 355.435185][ T7257] veth1_vlan: left promiscuous mode [ 355.440505][ T7257] veth0_vlan: left promiscuous mode [ 356.623153][ T5282] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 356.848074][ T5282] usb 3-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 356.898507][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.953594][ T5282] usb 3-1: config 0 descriptor?? [ 356.969046][ T5282] usb-storage 3-1:0.0: USB Mass Storage device detected [ 357.042824][ T7257] team0 (unregistering): Port device team_slave_1 removed [ 357.189428][ T7257] team0 (unregistering): Port device team_slave_0 removed [ 357.265137][ T4625] Bluetooth: hci1: command tx timeout [ 357.440841][ T940] usb 5-1: USB disconnect, device number 42 [ 357.622465][ T5281] usb 2-1: USB disconnect, device number 35 [ 357.897705][T10509] netlink: 'syz.1.1102': attribute type 12 has an invalid length. [ 357.937842][T10509] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.1102'. [ 358.715652][T10423] chnl_net:caif_netlink_parms(): no params data found [ 358.826897][T10519] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 359.259393][T10423] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.304522][T10423] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.311813][T10423] bridge_slave_0: entered allmulticast mode [ 359.343369][ T5238] Bluetooth: hci1: command tx timeout [ 359.344502][T10423] bridge_slave_0: entered promiscuous mode [ 359.375308][T10423] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.382434][T10423] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.399039][T10423] bridge_slave_1: entered allmulticast mode [ 359.409943][T10423] bridge_slave_1: entered promiscuous mode [ 359.473280][ T5266] usb 3-1: USB disconnect, device number 43 [ 359.530811][T10423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.588749][T10423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.796941][T10423] team0: Port device team_slave_0 added [ 359.880009][T10423] team0: Port device team_slave_1 added [ 359.978748][T10552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1116'. [ 360.011514][T10423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.028258][T10423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.056610][T10423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.112526][T10423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.136853][T10423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.189980][T10423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.335766][T10423] hsr_slave_0: entered promiscuous mode [ 360.351040][T10423] hsr_slave_1: entered promiscuous mode [ 360.535770][ T5238] Bluetooth: hci4: command 0x0406 tx timeout [ 360.833455][ T5301] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 361.023411][ T5301] usb 5-1: Using ep0 maxpacket: 8 [ 361.039294][ T5301] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 361.050183][ T5301] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 361.079860][ T5301] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 361.111012][ T5301] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 361.131955][ T5301] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.171788][ T5301] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 361.207835][ T5301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.315119][ T940] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 361.367206][T10423] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 361.396687][T10423] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 361.413243][ T4625] Bluetooth: hci1: command tx timeout [ 361.450979][T10423] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 361.474237][ T5301] usb 5-1: usb_control_msg returned -32 [ 361.476429][T10423] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 361.486976][ T5301] usbtmc 5-1:16.0: can't read capabilities [ 361.516899][ T940] usb 2-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 361.543512][ T940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.558396][ T940] usb 2-1: config 0 descriptor?? [ 361.588529][ T940] usb-storage 2-1:0.0: USB Mass Storage device detected [ 361.806690][T10423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.896263][T10605] usbtmc 5-1:16.0: usb_bulk_msg returned -71 [ 361.902595][T10423] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.928082][ T1058] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.935283][ T1058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.972359][ T1058] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.979516][ T1058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.098483][ T5282] usb 5-1: USB disconnect, device number 43 [ 362.336384][T10423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.545267][T10423] veth0_vlan: entered promiscuous mode [ 362.607231][T10423] veth1_vlan: entered promiscuous mode [ 362.712754][T10626] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1128'. [ 362.757991][T10423] veth0_macvtap: entered promiscuous mode [ 362.816493][T10423] veth1_macvtap: entered promiscuous mode [ 362.915287][T10423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.954757][T10423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.995542][T10423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.030170][T10423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.065563][T10423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.112427][T10423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.160914][T10423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.183482][T10423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.235478][T10423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.271726][T10423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.295790][T10423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.335985][T10423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.368489][T10423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.410387][T10423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.453698][T10423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.483842][T10423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.532245][T10423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.561576][T10423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.582130][ T51] usb 5-1: [UEAGLE-ATM] firmware is not available [ 363.588899][T10423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.619527][T10423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.669611][T10423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.732651][T10423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.762021][T10423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.789072][T10423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.808580][T10423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.869039][T10423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.928899][T10423] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.959080][T10423] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.973671][T10423] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.013004][T10423] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.061525][ T51] usb 2-1: USB disconnect, device number 36 [ 364.321235][ T7259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.339078][ T7259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.460567][ T7257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.503364][ T7257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.033561][ T58] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 365.256216][ T58] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 365.277677][ T58] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 365.295463][ T58] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 365.307695][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.782098][ T58] usb 4-1: string descriptor 0 read error: -71 [ 365.835045][ T58] usb 4-1: USB disconnect, device number 36 [ 366.003453][ T5301] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 366.209156][ T5301] usb 5-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 366.224205][ T5301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.235215][T10739] batadv_slave_1: entered promiscuous mode [ 366.247453][T10739] batadv_slave_1: left promiscuous mode [ 366.260209][ T5301] usb 5-1: config 0 descriptor?? [ 366.288933][ T5301] usb-storage 5-1:0.0: USB Mass Storage device detected [ 366.545726][T10749] bridge0: port 4(dummy0) entered blocking state [ 366.558208][T10749] bridge0: port 4(dummy0) entered disabled state [ 366.583569][T10749] dummy0: entered allmulticast mode [ 366.595354][T10749] dummy0: entered promiscuous mode [ 366.610287][T10749] bridge0: port 4(dummy0) entered blocking state [ 366.617987][T10749] bridge0: port 4(dummy0) entered forwarding state [ 366.633534][T10749] bridge0: mtu less than device minimum [ 366.642817][T10751] netlink: 'syz.3.1151': attribute type 4 has an invalid length. [ 366.682127][T10750] netlink: 'syz.3.1151': attribute type 4 has an invalid length. [ 367.944204][T10777] batadv_slave_1: entered promiscuous mode [ 367.965798][T10776] batadv_slave_1: left promiscuous mode [ 368.383430][ T5301] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 368.433790][ T5266] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 368.579988][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1164'. [ 368.594652][ T5301] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 368.605045][ T5301] usb 4-1: config 0 has no interface number 0 [ 368.611166][ T5301] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.659230][ T5266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.660171][ T5301] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.670559][ T5266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.717752][ T5266] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 368.741788][ T5301] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 368.749269][ T5266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.772156][ T5301] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 368.774982][ T5266] usb 2-1: config 0 descriptor?? [ 368.796629][ T5301] usb 4-1: Manufacturer: syz [ 368.814298][ T5301] usb 4-1: config 0 descriptor?? [ 369.036089][ T58] usb 5-1: USB disconnect, device number 44 [ 369.257251][ T5266] lg-g15 0003:046D:C222.0011: unknown main item tag 0x0 [ 369.292773][ T5266] lg-g15 0003:046D:C222.0011: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 369.364935][ T5301] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.18/0003:054C:03D5.0012/input/input25 [ 369.466201][ T5301] sony 0003:054C:03D5.0012: input,hidraw1: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.3-1/input18 [ 369.493200][ T5266] usb 2-1: USB disconnect, device number 37 [ 369.844638][ T5266] usb 4-1: USB disconnect, device number 37 [ 370.413622][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1177'. [ 371.043803][ T5282] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 371.206577][T10855] tipc: Started in network mode [ 371.211489][T10855] tipc: Node identity fec0ffff00000000000000000000001, cluster identity 4711 [ 371.233122][T10855] tipc: Enabling of bearer rejected, failed to enable media [ 371.287923][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.329595][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.362822][ T5282] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 371.384390][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.405201][ T5282] usb 4-1: config 0 descriptor?? [ 371.858236][ T5282] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 371.877785][ T5282] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 371.893472][ T5282] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 371.907374][ T5282] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 371.936876][ T5282] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 371.952118][ T5282] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 371.974104][ T5282] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 371.997626][ T5282] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 372.123423][ T5301] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 372.135526][ T5282] cp2112 0003:10C4:EA90.0013: error requesting version [ 372.145258][ T5282] cp2112 0003:10C4:EA90.0013: probe with driver cp2112 failed with error -71 [ 372.183374][ T5282] usb 4-1: USB disconnect, device number 38 [ 372.336638][ T5301] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 372.352746][ T5301] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 372.378736][ T5301] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 372.388235][ T5301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.530139][T10877] trusted_key: syz.2.1195 sent an empty control message without MSG_MORE. [ 372.642723][ T5301] usb 2-1: usb_control_msg returned -32 [ 372.651060][ T5301] usbtmc 2-1:16.0: can't read capabilities [ 373.099048][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1200'. [ 373.206082][T10898] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1201'. [ 373.219575][T10898] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 373.375405][T10900] loop9: detected capacity change from 0 to 7 [ 373.400615][T10900] Dev loop9: unable to read RDB block 7 [ 373.426312][T10900] loop9: AHDI p2 p3 p4 [ 373.446696][T10900] loop9: partition table partially beyond EOD, truncated [ 373.475368][T10900] loop9: p2 start 2961973428 is beyond EOD, truncated [ 373.482392][T10900] loop9: p3 start 1756542996 is beyond EOD, truncated [ 374.281158][ T7252] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.408136][ T7252] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.592191][ T7252] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.751554][ T7252] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.826644][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1220'. [ 374.868162][ T5283] usb 2-1: USB disconnect, device number 38 [ 375.086241][ T7252] bridge_slave_1: left allmulticast mode [ 375.109291][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 375.122116][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 375.129312][ T58] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 375.140870][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 375.151776][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 375.162049][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 375.169864][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 375.264507][ T7252] bridge_slave_1: left promiscuous mode [ 375.339253][ T7252] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.364642][ T58] usb 5-1: Using ep0 maxpacket: 32 [ 375.388929][ T58] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 375.409930][ T7252] bridge_slave_0: left allmulticast mode [ 375.419462][ T58] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 375.437388][ T7252] bridge_slave_0: left promiscuous mode [ 375.454801][ T5283] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 375.465044][ T58] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 375.475111][ T7252] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.480457][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 375.512296][ T58] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 375.537230][ T58] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 375.566790][ T58] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 375.595676][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.615742][ T58] usb 5-1: config 0 descriptor?? [ 375.694674][ T5283] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 375.725219][ T5283] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 375.750496][ T5283] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=22.40 [ 375.762995][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.781414][ T5283] usb 2-1: Product: syz [ 375.791862][ T5283] usb 2-1: Manufacturer: syz [ 375.801718][ T5283] usb 2-1: SerialNumber: syz [ 375.818307][ T5283] usb 2-1: config 0 descriptor?? [ 375.835677][ T58] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 375.871402][ T58] usb 5-1: USB disconnect, device number 45 [ 375.930377][ T58] usblp0: removed [ 376.067186][ T5283] usb 2-1: USB disconnect, device number 39 [ 376.424251][ T58] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 376.603761][ T7252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.622922][ T58] usb 5-1: Using ep0 maxpacket: 32 [ 376.649597][ T58] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 376.665821][ T58] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 376.674703][ T7252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.688761][ T58] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 376.699066][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 376.700122][ T7252] bond0 (unregistering): Released all slaves [ 376.710264][ T58] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 376.726580][ T58] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 376.741702][ T58] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 376.751896][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.774667][ T58] usb 5-1: config 0 descriptor?? [ 376.991477][ T58] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 377.263537][ T4625] Bluetooth: hci2: command tx timeout [ 377.410660][T10970] team0: entered promiscuous mode [ 377.433991][T10970] team_slave_0: entered promiscuous mode [ 377.453773][T10970] team_slave_1: entered promiscuous mode [ 377.499520][T10975] syz_tun: entered promiscuous mode [ 377.553264][ T51] usb 5-1: USB disconnect, device number 46 [ 377.566520][ T51] usblp0: removed [ 377.620659][T10969] syz_tun: left promiscuous mode [ 377.626487][T10969] team0: left promiscuous mode [ 377.631401][T10969] team_slave_0: left promiscuous mode [ 377.658848][T10969] team_slave_1: left promiscuous mode [ 377.753127][ T7252] hsr_slave_0: left promiscuous mode [ 377.809816][ T7252] hsr_slave_1: left promiscuous mode [ 377.847254][ T7252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.867656][ T7252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.905112][ T7252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.912589][ T7252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.020236][ T7252] veth1_macvtap: left promiscuous mode [ 378.025924][ T7252] veth0_macvtap: left promiscuous mode [ 378.031575][ T7252] veth1_vlan: left promiscuous mode [ 378.047981][ T7252] veth0_vlan: left promiscuous mode [ 378.442282][ T5281] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 378.654909][ T5281] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 378.679581][ T5281] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.716071][ T5281] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 378.730792][ T5281] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.776147][ T5281] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 378.785909][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 378.800796][ T5281] usb 2-1: Product: syz [ 378.821204][ T5281] usb 2-1: Manufacturer: syz [ 378.847868][T11003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1230'. [ 378.876321][ T5281] cdc_wdm 2-1:1.0: skipping garbage [ 378.892259][ T5281] cdc_wdm 2-1:1.0: skipping garbage [ 378.907659][ T5281] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 378.924226][ T5281] cdc_wdm 2-1:1.0: Unknown control protocol [ 378.936635][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.943958][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.100899][ T5281] usb 2-1: USB disconnect, device number 40 [ 379.340522][ T4625] Bluetooth: hci2: command tx timeout [ 379.521899][ T7252] team0 (unregistering): Port device team_slave_1 removed [ 379.588841][ T7252] team0 (unregistering): Port device team_slave_0 removed [ 379.720224][ T29] audit: type=1326 audit(1725643521.134:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.1.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d97cef9 code=0x7ffc0000 [ 379.761008][ T29] audit: type=1326 audit(1725643521.134:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.1.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d97cef9 code=0x7ffc0000 [ 379.784555][ T29] audit: type=1326 audit(1725643521.164:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.1.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f899d97cef9 code=0x7ffc0000 [ 379.808359][ T29] audit: type=1326 audit(1725643521.164:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.1.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d97cef9 code=0x7ffc0000 [ 379.831264][ T29] audit: type=1326 audit(1725643521.164:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.1.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d97cef9 code=0x7ffc0000 [ 379.854419][ T29] audit: type=1326 audit(1725643521.164:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.1.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f899d97cef9 code=0x7ffc0000 [ 379.880675][ T29] audit: type=1326 audit(1725643521.164:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.1.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d97cef9 code=0x7ffc0000 [ 379.903306][ T29] audit: type=1326 audit(1725643521.164:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.1.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f899d97cef9 code=0x7ffc0000 [ 379.926743][ T29] audit: type=1326 audit(1725643521.164:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.1.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d97cef9 code=0x7ffc0000 [ 379.949364][ T29] audit: type=1326 audit(1725643521.164:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.1.1238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899d97cef9 code=0x7ffc0000 [ 380.033000][ T5307] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 380.218330][ T30] INFO: task syz.4.402:7932 blocked for more than 143 seconds. [ 380.231424][ T5307] usb 2-1: Using ep0 maxpacket: 8 [ 380.236599][ T30] Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 380.244482][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.253847][ T30] task:syz.4.402 state:D stack:25792 pid:7932 tgid:7932 ppid:6207 flags:0x00000004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 380.266543][ T30] Call Trace: [ 380.282974][ T5307] usb 2-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice= a.8d [ 380.292053][ T5307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.300280][ T30] [ 380.303386][ T30] __schedule+0x1800/0x4a60 [ 380.307961][ T30] ? __pfx___schedule+0x10/0x10 [ 380.319915][ T5307] usb 2-1: config 0 descriptor?? [ 380.324978][ T30] ? __pfx_lock_release+0x10/0x10 [ 380.330694][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 380.357195][ T5307] usb-storage 2-1:0.0: USB Mass Storage device detected [ 380.384685][ T30] ? schedule+0x90/0x320 [ 380.388998][ T30] schedule+0x14b/0x320 [ 380.408060][ T30] schedule_preempt_disabled+0x13/0x30 [ 380.415132][ T5307] usb-storage 2-1:0.0: Quirks match for vid 054c pid 0069: 1 [ 380.431548][ T30] __mutex_lock+0x6a4/0xd70 [ 380.436874][ T30] ? __mutex_lock+0x527/0xd70 [ 380.441600][ T30] ? hugetlb_fault+0x56f/0x3770 [ 380.447243][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 380.452323][ T30] ? __lock_acquire+0x137a/0x2040 [ 380.457774][ T30] hugetlb_fault+0x56f/0x3770 [ 380.462515][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 380.468882][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 380.474536][ T30] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 380.479782][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 380.485807][ T30] handle_mm_fault+0x1901/0x1bc0 [ 380.490779][ T30] ? mtree_range_walk+0x6fd/0x8e0 [ 380.496105][ T30] ? __pfx_lock_release+0x10/0x10 [ 380.501166][ T30] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 380.506699][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 380.512036][ T30] ? lock_vma_under_rcu+0x592/0x6e0 [ 380.517614][ T30] ? lock_vma_under_rcu+0x18a/0x6e0 [ 380.524020][ T30] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 380.529622][ T30] ? exc_page_fault+0x113/0x8c0 [ 380.537415][ T30] exc_page_fault+0x459/0x8c0 [ 380.542230][ T30] asm_exc_page_fault+0x26/0x30 [ 380.547429][ T30] RIP: 0033:0x7f82a094497c [ 380.551876][ T30] RSP: 002b:00007f82a0c5fb88 EFLAGS: 00010246 [ 380.558273][ T30] RAX: 0000000020000d00 RBX: 0000000000000004 RCX: 8000000000000010 [ 380.566587][ T30] RDX: 0000000000000010 RSI: 00007f82a04005d5 RDI: 0000000020000d00 [ 380.575678][ T30] RBP: 00007f82a0b37a80 R08: 00007f82a0800000 R09: 0000000000000001 [ 380.583915][ T30] R10: 0000000000000001 R11: 0000000000000009 R12: 0000000000038ce8 [ 380.591904][ T30] R13: 00007f82a0c5fc90 R14: 0000000000000032 R15: fffffffffffffffe [ 380.599989][ T30] [ 380.603116][ T30] INFO: task syz.4.402:7933 blocked for more than 143 seconds. [ 380.610688][ T30] Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 380.618862][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.628866][ T30] task:syz.4.402 state:D stack:24696 pid:7933 tgid:7932 ppid:6207 flags:0x00004006 [ 380.639236][ T30] Call Trace: [ 380.642524][ T30] [ 380.646126][ T30] __schedule+0x1800/0x4a60 [ 380.650673][ T30] ? __pfx___schedule+0x10/0x10 [ 380.656046][ T30] ? __pfx_lock_release+0x10/0x10 [ 380.661106][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 380.666668][ T30] ? schedule+0x90/0x320 [ 380.670919][ T30] schedule+0x14b/0x320 [ 380.675120][ T30] schedule_preempt_disabled+0x13/0x30 [ 380.680584][ T30] __mutex_lock+0x6a4/0xd70 [ 380.686037][ T30] ? __mutex_lock+0x527/0xd70 [ 380.690742][ T30] ? hugetlb_wp+0x104d/0x3a90 [ 380.695727][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 380.700781][ T30] ? __pfx_up_write+0x10/0x10 [ 380.705626][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 380.710839][ T30] ? vma_interval_tree_iter_next+0x193/0x340 [ 380.716885][ T30] hugetlb_wp+0x104d/0x3a90 [ 380.721396][ T30] ? mark_lock+0x9a/0x350 [ 380.726460][ T30] ? __pfx_hugetlb_wp+0x10/0x10 [ 380.731325][ T30] ? __pfx___might_resched+0x10/0x10 [ 380.736668][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 380.741702][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 380.746815][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 380.752210][ T30] ? __filemap_get_folio+0x769/0xc10 [ 380.759662][ T30] hugetlb_fault+0x27b2/0x3770 [ 380.764538][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 380.769663][ T30] ? mt_find+0x226/0x850 [ 380.774036][ T30] ? __pfx_lock_release+0x10/0x10 [ 380.779079][ T30] handle_mm_fault+0x1901/0x1bc0 [ 380.784084][ T30] ? mt_find+0x62d/0x850 [ 380.788337][ T30] ? mt_find+0x226/0x850 [ 380.792606][ T30] ? __pfx_mt_find+0x10/0x10 [ 380.798199][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 380.803669][ T30] ? find_vma+0xf9/0x170 [ 380.807937][ T30] ? __pfx_find_vma+0x10/0x10 [ 380.812638][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 380.819038][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 380.824410][ T30] exc_page_fault+0x2b9/0x8c0 [ 380.829690][ T30] asm_exc_page_fault+0x26/0x30 [ 380.834634][ T30] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 380.840463][ T30] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 380.860855][ T30] RSP: 0018:ffffc90004127ad0 EFLAGS: 00050246 [ 380.868918][ T30] RAX: ffffffff84b29101 RBX: 0000000020008640 RCX: 0000000000000040 [ 380.876948][ T30] RDX: 0000000000000000 RSI: ffffc90004127b60 RDI: 0000000020008600 [ 380.885003][ T30] RBP: ffffc90004127c10 R08: ffffc90004127b9f R09: 1ffff92000824f73 [ 380.893027][ T30] R10: dffffc0000000000 R11: fffff52000824f74 R12: 0000000000000040 [ 380.901019][ T30] R13: 0000000000007fc0 R14: 0000000020008600 R15: ffffc90004127b60 [ 380.909608][ T30] ? __pfx__copy_to_user+0x1/0x10 [ 380.915034][ T30] _copy_to_user+0x86/0xb0 [ 380.919490][ T30] rng_dev_read+0x3be/0x6d0 [ 380.924077][ T30] ? __pfx_rng_dev_read+0x10/0x10 [ 380.929550][ T30] ? security_file_permission+0x7f/0xa0 [ 380.935424][ T30] ? rw_verify_area+0x52a/0x6b0 [ 380.940288][ T30] vfs_readv+0x6c2/0xa90 [ 380.944811][ T30] ? __pfx_rng_dev_read+0x10/0x10 [ 380.949857][ T30] ? __pfx_vfs_readv+0x10/0x10 [ 380.954694][ T30] ? __fget_files+0x29/0x470 [ 380.959280][ T30] __x64_sys_preadv+0x1c7/0x2d0 [ 380.964180][ T30] ? __pfx___x64_sys_preadv+0x10/0x10 [ 380.969564][ T30] ? do_syscall_64+0x100/0x230 [ 380.976261][ T30] ? do_syscall_64+0xb6/0x230 [ 380.981314][ T30] do_syscall_64+0xf3/0x230 [ 380.985860][ T30] ? clear_bhb_loop+0x35/0x90 [ 380.990537][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.996480][ T30] RIP: 0033:0x7f82a097cef9 [ 381.000901][ T30] RSP: 002b:00007f82a174d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 381.009387][ T30] RAX: ffffffffffffffda RBX: 00007f82a0b35f80 RCX: 00007f82a097cef9 [ 381.018645][ T30] RDX: 0000000000000002 RSI: 0000000020000580 RDI: 0000000000000005 [ 381.027473][ T30] RBP: 00007f82a09ef01e R08: 0000000000000000 R09: 0000000000000000 [ 381.035849][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.043959][ T30] R13: 0000000000000000 R14: 00007f82a0b35f80 R15: 00007f82a0c5fa28 [ 381.052060][ T30] [ 381.056594][ T30] INFO: task syz.4.402:7934 blocked for more than 144 seconds. [ 381.064357][ T30] Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 381.072012][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 381.091330][ T30] task:syz.4.402 state:D stack:23288 pid:7934 tgid:7932 ppid:6207 flags:0x00004006 [ 381.113009][ T30] Call Trace: [ 381.116329][ T30] [ 381.119278][ T30] __schedule+0x1800/0x4a60 [ 381.125405][ T30] ? __pfx___schedule+0x10/0x10 [ 381.130299][ T30] ? __pfx_lock_release+0x10/0x10 [ 381.144981][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 381.151016][ T30] ? schedule+0x90/0x320 [ 381.162522][ T30] schedule+0x14b/0x320 [ 381.169677][ T30] io_schedule+0x8d/0x110 [ 381.180971][ T30] folio_wait_bit_common+0x882/0x12b0 [ 381.186850][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 381.192688][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 381.208661][ T30] ? _raw_spin_unlock+0x28/0x50 [ 381.217308][ T30] ? __vma_reservation_common+0x498/0x7d0 [ 381.223484][ T30] __filemap_get_folio+0xb7/0xc10 [ 381.228547][ T30] hugetlb_fault+0x1b72/0x3770 [ 381.234754][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 381.240485][ T30] ? mt_find+0x226/0x850 [ 381.244819][ T30] ? __pfx_lock_release+0x10/0x10 [ 381.249861][ T30] handle_mm_fault+0x1901/0x1bc0 [ 381.255299][ T30] ? mt_find+0x62d/0x850 [ 381.259759][ T30] ? mt_find+0x226/0x850 [ 381.264136][ T30] ? __pfx_mt_find+0x10/0x10 [ 381.268749][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 381.274096][ T30] ? find_vma+0xf9/0x170 [ 381.278354][ T30] ? __pfx_find_vma+0x10/0x10 [ 381.283107][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 381.289448][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 381.294845][ T30] exc_page_fault+0x2b9/0x8c0 [ 381.299541][ T30] asm_exc_page_fault+0x26/0x30 [ 381.304522][ T30] RIP: 0010:__put_user_8+0x11/0x20 [ 381.309648][ T30] Code: 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 381.329625][ T30] RSP: 0018:ffffc9000383f778 EFLAGS: 00050202 [ 381.337689][ T30] RAX: 0000000000800000 RBX: 0000000000000000 RCX: 0000000020000020 [ 381.346499][ T30] RDX: 0000000000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c608d80 [ 381.354856][ T30] RBP: ffffc9000383fec8 R08: ffffffff901870ef R09: 1ffffffff2030e1d [ 381.363248][ T30] R10: dffffc0000000000 R11: fffffbfff2030e1e R12: 1ffff92000707f7d [ 381.371247][ T30] R13: 1ffff92000707f08 R14: 0000000020800000 R15: 0000000000800000 [ 381.379290][ T30] userfaultfd_ioctl+0x28e7/0x70a0 [ 381.384451][ T30] ? stack_trace_save+0x118/0x1d0 [ 381.389492][ T30] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 381.395062][ T30] ? stack_depot_save_flags+0x29/0x830 [ 381.400619][ T30] ? kasan_save_track+0x51/0x80 [ 381.405555][ T30] ? kasan_save_track+0x3f/0x80 [ 381.410422][ T30] ? kasan_save_free_info+0x40/0x50 [ 381.415818][ T30] ? poison_slab_object+0xe0/0x150 [ 381.420957][ T30] ? __kasan_slab_free+0x37/0x60 [ 381.424016][ T4625] Bluetooth: hci2: command tx timeout [ 381.425955][ T30] ? kfree+0x149/0x360 [ 381.435586][ T30] ? tomoyo_path_number_perm+0x68d/0x880 [ 381.441907][ T30] ? security_file_ioctl+0x75/0xb0 [ 381.447521][ T30] ? __se_sys_ioctl+0x47/0x170 [ 381.452307][ T30] ? do_syscall_64+0xf3/0x230 [ 381.457504][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.464991][ T30] ? do_vfs_ioctl+0xf0e/0x2e50 [ 381.469800][ T30] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 381.474891][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 381.481232][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 381.486950][ T30] ? __pfx_lock_release+0x10/0x10 [ 381.491993][ T30] ? kfree+0x149/0x360 [ 381.496512][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 381.502149][ T30] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 381.508582][ T30] ? __fget_files+0x29/0x470 [ 381.513274][ T30] ? __fget_files+0x3f6/0x470 [ 381.517958][ T30] ? __fget_files+0x29/0x470 [ 381.522536][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 381.527513][ T30] ? security_file_ioctl+0x87/0xb0 [ 381.532640][ T30] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 381.538171][ T30] __se_sys_ioctl+0xfc/0x170 [ 381.542779][ T30] do_syscall_64+0xf3/0x230 [ 381.548665][ T30] ? clear_bhb_loop+0x35/0x90 [ 381.553606][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.559600][ T30] RIP: 0033:0x7f82a097cef9 [ 381.565916][ T30] RSP: 002b:00007f82a172c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.575453][ T30] RAX: ffffffffffffffda RBX: 00007f82a0b36058 RCX: 00007f82a097cef9 [ 381.583525][ T30] RDX: 0000000020000000 RSI: 00000000c028aa03 RDI: 0000000000000009 [ 381.591514][ T30] RBP: 00007f82a09ef01e R08: 0000000000000000 R09: 0000000000000000 [ 381.599639][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.607718][ T30] R13: 0000000000000000 R14: 00007f82a0b36058 R15: 00007f82a0c5fa28 [ 381.615766][ T30] [ 381.618827][ T30] [ 381.618827][ T30] Showing all locks held in the system: [ 381.626685][ T30] 1 lock held by khungtaskd/30: [ 381.631555][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 381.652754][ T30] 1 lock held by dhcpcd/4900: [ 381.661789][ T30] #0: ffffffff8fc8be48 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1bc0 [ 381.679753][ T30] 2 locks held by getty/4982: [ 381.685137][ T30] #0: ffff8880308270a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 381.699184][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 381.709455][ T30] 5 locks held by kworker/u8:12/7252: [ 381.714910][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 381.725876][ T30] #1: ffffc90009267d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 381.736629][ T30] #2: ffffffff8fc7f290 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 381.746144][ T30] #3: ffffffff8fc8be48 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 381.756511][ T30] #4: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 381.767677][ T30] 3 locks held by kworker/u8:13/7257: [ 381.773139][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 381.785008][ T30] #1: ffffc90004ee7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 381.796077][ T30] #2: ffffffff8fc8be48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 381.805701][ T30] 2 locks held by syz.4.402/7932: [ 381.810711][ T30] #0: ffff88807be333d0 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 381.821138][ T30] #1: ffff8880206e6218 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770 [ 381.832022][ T30] 2 locks held by syz.4.402/7933: [ 381.837117][ T30] #0: ffff8880352aa798 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 381.847271][ T30] #1: ffff8880206e6218 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_wp+0x104d/0x3a90 [ 381.858309][ T30] 3 locks held by syz.4.402/7934: [ 381.863450][ T30] #0: ffff8880352aa798 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 381.873693][ T30] #1: ffff8880206e6218 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770 [ 381.884600][ T30] #2: ffff8880250d48e8 (&resv_map->rw_sema){++++}-{3:3}, at: hugetlb_fault+0x675/0x3770 [ 381.894757][ T30] 2 locks held by syz.2.812/9374: [ 381.899790][ T30] #0: ffff888024984c40 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 381.910165][ T30] #1: ffff8880206e6218 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770 [ 381.921368][ T30] 1 lock held by syz-executor/10950: [ 381.927079][ T30] #0: ffffffff8fc8be48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 381.936558][ T30] 1 lock held by syz.3.1233/10991: [ 381.941657][ T30] #0: ffffffff8fc8be48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 381.951108][ T30] 3 locks held by syz.3.1233/10996: [ 381.957366][ T30] #0: ffffffff8fcf15b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 381.965710][ T30] #1: ffff888062b59678 (nlk_cb_mutex-GENERIC){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 381.976334][ T30] #2: ffffffff8fc8be48 (rtnl_mutex){+.+.}-{3:3}, at: ethnl_default_dumpit+0x411/0xb30 [ 381.986198][ T30] 2 locks held by syz.2.1230/11003: [ 381.991400][ T30] #0: ffffffff8fcf15b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 381.999659][ T30] #1: ffffffff8fc8be48 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 382.009484][ T30] 4 locks held by syz.1.1238/11010: [ 382.015828][ T30] #0: ffff88802f9a0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 382.025861][ T30] #1: ffff88802f9a0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 382.035584][ T30] #2: ffffffff8fdf7968 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 382.045702][ T30] #3: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 382.057227][ T30] 1 lock held by syz.4.1239/11013: [ 382.062342][ T30] #0: ffffffff8fc8be48 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48f/0x2400 [ 382.071763][ T30] 1 lock held by syz.4.1239/11014: [ 382.076919][ T30] #0: ffffffff8fc8be48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 382.085986][ T30] 1 lock held by syz.4.1239/11015: [ 382.091091][ T30] #0: ffffffff8fc8be48 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x706/0x1340 [ 382.100008][ T30] [ 382.102379][ T30] ============================================= [ 382.102379][ T30] [ 382.111064][ T30] NMI backtrace for cpu 0 [ 382.115432][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 382.125956][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 382.136042][ T30] Call Trace: [ 382.139314][ T30] [ 382.142244][ T30] dump_stack_lvl+0x241/0x360 [ 382.146915][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.152166][ T30] ? __pfx__printk+0x10/0x10 [ 382.156758][ T30] ? vprintk_emit+0x667/0x7c0 [ 382.161434][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 382.166469][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 382.171429][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 382.176882][ T30] ? _printk+0xd5/0x120 [ 382.181026][ T30] ? __pfx__printk+0x10/0x10 [ 382.185608][ T30] ? __wake_up_klogd+0xcc/0x110 [ 382.190462][ T30] ? __pfx__printk+0x10/0x10 [ 382.195042][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 382.200056][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 382.206028][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 382.212004][ T30] watchdog+0xff4/0x1040 [ 382.216268][ T30] ? watchdog+0x1ea/0x1040 [ 382.220702][ T30] ? __pfx_watchdog+0x10/0x10 [ 382.225387][ T30] kthread+0x2f0/0x390 [ 382.229454][ T30] ? __pfx_watchdog+0x10/0x10 [ 382.234125][ T30] ? __pfx_kthread+0x10/0x10 [ 382.238788][ T30] ret_from_fork+0x4b/0x80 [ 382.243200][ T30] ? __pfx_kthread+0x10/0x10 [ 382.247777][ T30] ret_from_fork_asm+0x1a/0x30 [ 382.252546][ T30] [ 382.258156][ T30] Sending NMI from CPU 0 to CPUs 1: [ 382.264897][ C1] NMI backtrace for cpu 1 [ 382.264913][ C1] CPU: 1 UID: 0 PID: 7259 Comm: kworker/u8:14 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 382.264932][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 382.264942][ C1] Workqueue: 0x0 (bat_events) [ 382.264967][ C1] RIP: 0010:process_scheduled_works+0x1fd/0x1830 [ 382.264990][ C1] Code: e8 18 6f 9c 00 4c 8b 35 41 8d 02 0d 48 8b 5c 24 48 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 f6 6e 9c 00 48 8b 1b <48> 83 c3 50 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 [ 382.265003][ C1] RSP: 0018:ffffc900098c7bc0 EFLAGS: 00000046 [ 382.265015][ C1] RAX: 1ffff11005d68dcb RBX: ffff88801aca0000 RCX: ffff88806550bc00 [ 382.265028][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 382.265038][ C1] RBP: ffffc900098c7dc0 R08: ffffffff815e648d R09: 1ffff110291e65b1 [ 382.265050][ C1] R10: dffffc0000000000 R11: ffffed10291e65b2 R12: dffffc0000000000 [ 382.265061][ C1] R13: ffff888064648660 R14: 0000000100001f4d R15: ffff888064648668 [ 382.265073][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 382.265087][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 382.265098][ C1] CR2: 00007f9e9a1f9000 CR3: 000000000e734000 CR4: 00000000003506f0 [ 382.265112][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 382.265121][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 382.265131][ C1] Call Trace: [ 382.265137][ C1] [ 382.265143][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 382.265163][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 382.265183][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 382.265201][ C1] ? nmi_handle+0x2a/0x5a0 [ 382.265224][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 382.265243][ C1] ? nmi_handle+0x14f/0x5a0 [ 382.265257][ C1] ? nmi_handle+0x2a/0x5a0 [ 382.265273][ C1] ? process_scheduled_works+0x1fd/0x1830 [ 382.265290][ C1] ? default_do_nmi+0x63/0x160 [ 382.265310][ C1] ? exc_nmi+0x123/0x1f0 [ 382.265327][ C1] ? end_repeat_nmi+0xf/0x53 [ 382.265349][ C1] ? process_scheduled_works+0x1ad/0x1830 [ 382.265368][ C1] ? process_scheduled_works+0x1fd/0x1830 [ 382.265387][ C1] ? process_scheduled_works+0x1fd/0x1830 [ 382.265406][ C1] ? process_scheduled_works+0x1fd/0x1830 [ 382.265424][ C1] [ 382.265430][ C1] [ 382.265450][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 382.265472][ C1] ? assign_work+0x364/0x3d0 [ 382.265492][ C1] worker_thread+0x86d/0xd10 [ 382.265519][ C1] ? __kthread_parkme+0x169/0x1d0 [ 382.265539][ C1] ? __pfx_worker_thread+0x10/0x10 [ 382.265557][ C1] kthread+0x2f0/0x390 [ 382.265570][ C1] ? __pfx_worker_thread+0x10/0x10 [ 382.265588][ C1] ? __pfx_kthread+0x10/0x10 [ 382.265602][ C1] ret_from_fork+0x4b/0x80 [ 382.265620][ C1] ? __pfx_kthread+0x10/0x10 [ 382.265634][ C1] ret_from_fork_asm+0x1a/0x30 [ 382.265661][ C1] [ 382.268875][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 382.560876][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 382.571380][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 382.581443][ T30] Call Trace: [ 382.584713][ T30] [ 382.587633][ T30] dump_stack_lvl+0x241/0x360 [ 382.592303][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.597490][ T30] ? __pfx__printk+0x10/0x10 [ 382.602156][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 382.608133][ T30] ? vscnprintf+0x5d/0x90 [ 382.612474][ T30] panic+0x349/0x860 [ 382.616378][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 382.622537][ T30] ? __pfx_panic+0x10/0x10 [ 382.626950][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 382.632317][ T30] ? __irq_work_queue_local+0x137/0x410 [ 382.637858][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 382.643218][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 382.649361][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 382.655504][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 382.661648][ T30] watchdog+0x1033/0x1040 [ 382.665971][ T30] ? watchdog+0x1ea/0x1040 [ 382.670383][ T30] ? __pfx_watchdog+0x10/0x10 [ 382.675154][ T30] kthread+0x2f0/0x390 [ 382.679212][ T30] ? __pfx_watchdog+0x10/0x10 [ 382.683881][ T30] ? __pfx_kthread+0x10/0x10 [ 382.688467][ T30] ret_from_fork+0x4b/0x80 [ 382.692876][ T30] ? __pfx_kthread+0x10/0x10 [ 382.697450][ T30] ret_from_fork_asm+0x1a/0x30 [ 382.702213][ T30] [ 382.705427][ T30] Kernel Offset: disabled [ 382.709736][ T30] Rebooting in 86400 seconds..