last executing test programs: 5.547964776s ago: executing program 2 (id=538): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.742291663s ago: executing program 3 (id=543): keyctl$setperm(0x5, 0x0, 0x100) r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = open(0x0, 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x2) flock(r2, 0x1) flock(r3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3.44157961s ago: executing program 3 (id=545): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000f1401002cbd"], 0x1c}, 0x1, 0x0, 0x0, 0x40051}, 0x4000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0xe) 3.145694269s ago: executing program 3 (id=547): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000480)="80fd1c006c3f", 0x6}], 0x1, 0x100000, 0x802) 2.988030023s ago: executing program 2 (id=549): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000800000095"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x80000001, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000300"/16], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) 2.963783413s ago: executing program 3 (id=550): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40}}, 0x18}}, 0x0) r0 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2.861156176s ago: executing program 2 (id=551): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) 2.798079177s ago: executing program 3 (id=552): ioctl$BLKCRYPTOGENERATEKEY(0xffffffffffffffff, 0xc030128a, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x3ff) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x24, 0x3) ioctl$TCSETS(r0, 0x5402, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x400c0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) write(r5, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042402000000ff02000300000000", 0x1e5) 2.617555832s ago: executing program 2 (id=553): keyctl$setperm(0x5, 0x0, 0x100) r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(0x0, 0x10000, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x2) flock(r2, 0x1) flock(r3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2.28913172s ago: executing program 2 (id=555): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000f1401002cbd7000fadbdf"], 0x1c}, 0x1, 0x0, 0x0, 0x40051}, 0x4000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0xe) 1.908806361s ago: executing program 2 (id=558): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0003b8000000b803"]}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 1.760414795s ago: executing program 0 (id=559): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000800000095"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x80000001, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000300"/16], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) 1.511961931s ago: executing program 0 (id=560): r0 = syz_open_dev$admmidi(0x0, 0xc, 0x100) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x2b, 0x6, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) r2 = open(0x0, 0x518282, 0x78e22799f4a46e9c) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) getdents64(r3, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r6, 0xfffffffffffffffe, {0x1, 0x1, 0x1}, 0x1}, 0x18) writev(r0, &(0x7f00000082c0)=[{0x0}, {0x0}], 0x2) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000000240)) connect$can_bcm(r4, &(0x7f0000000100)={0x1d, r6}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x23, 0x1, 0x3a600000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8982, &(0x7f0000000280)={0x7, 'veth0_to_team\x00', {0x87}, 0x1}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20004004) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000980), 0x80040, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r8, 0xae45, 0x1) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x4, &(0x7f00000001c0)=[{0x7fff, 0x4, 0xb, 0x1ff}, {0x5, 0x2, 0x4, 0x7}, {0x9, 0x65, 0x1, 0x7e}, {0xa6d0, 0xb, 0x6, 0x3ff}]}, 0x10) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 1.427977983s ago: executing program 1 (id=561): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) 1.197337439s ago: executing program 1 (id=562): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, 0x0, 0x20008800) write$tun(r0, &(0x7f0000003240)=ANY=[@ANYBLOB="080088a805000200b6e714"], 0xfce) 1.072044752s ago: executing program 0 (id=563): keyctl$setperm(0x5, 0x0, 0x100) r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(0x0, 0x10000, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x2) flock(r2, 0x1) flock(r3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 717.951461ms ago: executing program 1 (id=564): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0xffffffff}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 693.454432ms ago: executing program 0 (id=565): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 435.933659ms ago: executing program 0 (id=566): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016", 0x33}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x2, @multicast1}, 0x5, 0x0, 0x0, 0x2}}, 0x80, 0x0}, 0x20048010) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 435.792889ms ago: executing program 1 (id=567): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000f1401002cbd7000fadbdf"], 0x1c}, 0x1, 0x0, 0x0, 0x40051}, 0x4000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0xe) 276.948593ms ago: executing program 1 (id=568): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000800000095"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x80000001, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000300"/16], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) 89.865848ms ago: executing program 0 (id=569): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001040)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x4) tkill(0x0, 0x7) r3 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbdd, &(0x7f0000019200)="$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") r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) signalfd4(r3, &(0x7f0000000280)={[0x9]}, 0x8, 0x80000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r4, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000200)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') read$FUSE(r8, &(0x7f00000061c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capget(&(0x7f0000000080)={0x19980330, r9}, &(0x7f0000000240)) ptrace$poke(0x4, r9, 0x0, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) renameat2(0xffffffffffffffff, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x4) 64.284639ms ago: executing program 3 (id=570): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) 0s ago: executing program 1 (id=571): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r2, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) close(r2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000075c0)={@local, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd432, 0x40, 0x9, 0x400, 0x6, 0x20001}) r6 = dup(r4) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}}) getxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.211' (ED25519) to the list of known hosts. [ 74.718635][ T5762] cgroup: Unknown subsys name 'net' [ 74.884781][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.590342][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.226920][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.246660][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.253193][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.254311][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.262702][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.271182][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.275514][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.292220][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.300702][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.308694][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.316463][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.323750][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.326122][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.331941][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.349885][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.357420][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.365017][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.373459][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.381865][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.382082][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.398117][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.398407][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.415662][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.416282][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.852662][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 78.934018][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 78.986372][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 79.039974][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 79.095861][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.104550][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.114342][ T5777] bridge_slave_0: entered allmulticast mode [ 79.122196][ T5777] bridge_slave_0: entered promiscuous mode [ 79.132538][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.140034][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.147418][ T5777] bridge_slave_1: entered allmulticast mode [ 79.154618][ T5777] bridge_slave_1: entered promiscuous mode [ 79.254593][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.282296][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.294934][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.302801][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.310380][ T5775] bridge_slave_0: entered allmulticast mode [ 79.318173][ T5775] bridge_slave_0: entered promiscuous mode [ 79.326044][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.333708][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.340951][ T5775] bridge_slave_1: entered allmulticast mode [ 79.348881][ T5775] bridge_slave_1: entered promiscuous mode [ 79.361248][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.370337][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.377750][ T5778] bridge_slave_0: entered allmulticast mode [ 79.384642][ T5778] bridge_slave_0: entered promiscuous mode [ 79.433811][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.442213][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.449482][ T5778] bridge_slave_1: entered allmulticast mode [ 79.456278][ T5778] bridge_slave_1: entered promiscuous mode [ 79.487333][ T5777] team0: Port device team_slave_0 added [ 79.515564][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.529714][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.541486][ T5777] team0: Port device team_slave_1 added [ 79.565241][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.572788][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.580558][ T5776] bridge_slave_0: entered allmulticast mode [ 79.587902][ T5776] bridge_slave_0: entered promiscuous mode [ 79.597515][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.610077][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.638545][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.645550][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.672163][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.685807][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.693908][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.701394][ T5776] bridge_slave_1: entered allmulticast mode [ 79.709061][ T5776] bridge_slave_1: entered promiscuous mode [ 79.728248][ T5775] team0: Port device team_slave_0 added [ 79.734950][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.742492][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.769018][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.803370][ T5775] team0: Port device team_slave_1 added [ 79.834871][ T5778] team0: Port device team_slave_0 added [ 79.865066][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.878295][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.889061][ T5778] team0: Port device team_slave_1 added [ 79.908162][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.915156][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.941642][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.964500][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.971920][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.998288][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.061609][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.068696][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.095025][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.109073][ T5776] team0: Port device team_slave_0 added [ 80.120093][ T5777] hsr_slave_0: entered promiscuous mode [ 80.129430][ T5777] hsr_slave_1: entered promiscuous mode [ 80.158926][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.166158][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.194934][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.209258][ T5776] team0: Port device team_slave_1 added [ 80.229173][ T5775] hsr_slave_0: entered promiscuous mode [ 80.235794][ T5775] hsr_slave_1: entered promiscuous mode [ 80.242657][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.251365][ T5775] Cannot create hsr debugfs directory [ 80.291312][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.298776][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.325106][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.338924][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.345938][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.372534][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.418036][ T5086] Bluetooth: hci0: command tx timeout [ 80.418052][ T5788] Bluetooth: hci2: command tx timeout [ 80.466017][ T5778] hsr_slave_0: entered promiscuous mode [ 80.472569][ T5778] hsr_slave_1: entered promiscuous mode [ 80.479226][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.486790][ T5778] Cannot create hsr debugfs directory [ 80.497401][ T5086] Bluetooth: hci3: command tx timeout [ 80.498770][ T5788] Bluetooth: hci1: command tx timeout [ 80.603211][ T5776] hsr_slave_0: entered promiscuous mode [ 80.610375][ T5776] hsr_slave_1: entered promiscuous mode [ 80.616472][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.624524][ T5776] Cannot create hsr debugfs directory [ 80.941056][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.960071][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.971484][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.997127][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.072647][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.084265][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.101844][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.125516][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.188290][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.202189][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.212370][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.237695][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.339826][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.353571][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.363433][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.375259][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.447976][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.490083][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.523841][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.535445][ T2910] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.542897][ T2910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.568170][ T2910] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.575325][ T2910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.626181][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.664787][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.686387][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.704356][ T2910] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.711653][ T2910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.740329][ T2910] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.747618][ T2910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.760899][ T2910] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.768263][ T2910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.800572][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.807837][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.949585][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.976289][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.061281][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.083477][ T4557] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.090723][ T4557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.124424][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.131946][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.306063][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.499141][ T5788] Bluetooth: hci2: command tx timeout [ 82.499551][ T5086] Bluetooth: hci0: command tx timeout [ 82.512739][ T5777] veth0_vlan: entered promiscuous mode [ 82.534796][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.572548][ T5777] veth1_vlan: entered promiscuous mode [ 82.577595][ T5086] Bluetooth: hci3: command tx timeout [ 82.581214][ T5788] Bluetooth: hci1: command tx timeout [ 82.704372][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.722582][ T5775] veth0_vlan: entered promiscuous mode [ 82.731988][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.744174][ T5777] veth0_macvtap: entered promiscuous mode [ 82.764143][ T5775] veth1_vlan: entered promiscuous mode [ 82.792477][ T5777] veth1_macvtap: entered promiscuous mode [ 82.831102][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.880785][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.895450][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.905101][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.914953][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.924206][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.940901][ T5775] veth0_macvtap: entered promiscuous mode [ 82.952468][ T5775] veth1_macvtap: entered promiscuous mode [ 82.966767][ T5776] veth0_vlan: entered promiscuous mode [ 83.043710][ T5776] veth1_vlan: entered promiscuous mode [ 83.057032][ T5778] veth0_vlan: entered promiscuous mode [ 83.063547][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.075091][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.086455][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.132427][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.144694][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.159132][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.184651][ T5778] veth1_vlan: entered promiscuous mode [ 83.200391][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.209961][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.220735][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.229878][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.287702][ T4557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.296027][ T4557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.346220][ T5776] veth0_macvtap: entered promiscuous mode [ 83.376670][ T5778] veth0_macvtap: entered promiscuous mode [ 83.404524][ T5776] veth1_macvtap: entered promiscuous mode [ 83.425278][ T2929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.427811][ T5778] veth1_macvtap: entered promiscuous mode [ 83.437115][ T2929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.495774][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.509734][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.534808][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.539142][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.555989][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.568368][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.581020][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.591493][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.604037][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.620860][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.632258][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.643209][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.653932][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.665398][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.683925][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.695287][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.706058][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.717369][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.733118][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.801644][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.820485][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.831245][ T5839] syz.1.2[5839]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 83.837077][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.844790][ T5839] loop7: detected capacity change from 0 to 16387 [ 83.869568][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.899898][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.912919][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.926252][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.934548][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.950549][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.964920][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.990915][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.006693][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.016182][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.047905][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.056672][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.073649][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.085204][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.118038][ T5840] loop7: detected capacity change from 16387 to 0 [ 84.477888][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.485795][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.509491][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.118857][ T5847] loop3: detected capacity change from 0 to 512 [ 85.131752][ T5086] Bluetooth: hci2: command tx timeout [ 85.139151][ T5785] Bluetooth: hci1: command tx timeout [ 85.145281][ T5785] Bluetooth: hci3: command tx timeout [ 85.155463][ T5788] Bluetooth: hci0: command tx timeout [ 85.184074][ T5848] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 85.190913][ T5848] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 85.199760][ T5848] vhci_hcd vhci_hcd.0: Device attached [ 85.275713][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.356498][ T5847] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.4: inode has both inline data and extents flags [ 85.372288][ T5847] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.4: couldn't read orphan inode 15 (err -117) [ 85.395288][ T5847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.033610][ T787] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 86.357311][ T5849] vhci_hcd: connection closed [ 86.378373][ T2910] vhci_hcd: stop threads [ 86.549357][ T2910] vhci_hcd: release socket [ 86.564617][ T2910] vhci_hcd: disconnect device [ 86.975906][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.021473][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.050048][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.116054][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.227783][ T5788] Bluetooth: hci0: command tx timeout [ 87.233350][ T5785] Bluetooth: hci3: command tx timeout [ 87.242418][ T5086] Bluetooth: hci2: command tx timeout [ 87.249326][ T51] Bluetooth: hci1: command tx timeout [ 87.436864][ C1] sched: RT throttling activated [ 87.735563][ T5086] Bluetooth: hci0: Malformed Event: 0x13 [ 87.882918][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.737610][ T787] vhci_hcd: vhci_device speed not set [ 92.450399][ T8] cfg80211: failed to load regulatory.db [ 92.768673][ T5893] warning: `syz.1.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.591456][ T5917] binder: 5916:5917 ioctl c0306201 200000000080 returned -14 [ 93.613236][ T5917] binder: 5916:5917 ioctl c0306201 2000000003c0 returned -14 [ 94.297028][ T28] audit: type=1326 audit(1777736770.581:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5929 comm="syz.1.27" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93ec19cdd9 code=0x0 [ 94.585247][ T5949] comedi comedi0: Minor 47 could not be opened [ 94.616046][ T5951] netlink: 'syz.0.34': attribute type 21 has an invalid length. [ 94.859615][ T5960] netlink: 'syz.2.38': attribute type 22 has an invalid length. [ 94.950694][ T5963] netlink: 'syz.3.39': attribute type 10 has an invalid length. [ 95.015650][ T5963] team0: Port device wlan1 added [ 95.119065][ T5962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.139939][ T5969] Zero length message leads to an empty skb [ 95.553843][ T28] audit: type=1326 audit(1777736771.851:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.3.50" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd5059cdd9 code=0x0 [ 95.637610][ T5989] netlink: 'syz.2.51': attribute type 22 has an invalid length. [ 96.285164][ T6010] netlink: 176 bytes leftover after parsing attributes in process `syz.2.60'. [ 96.323353][ T6012] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.035870][ T6040] netlink: 176 bytes leftover after parsing attributes in process `syz.2.72'. [ 97.295166][ T28] audit: type=1326 audit(1777736773.591:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.2.75" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b50b9cdd9 code=0x0 [ 97.739697][ T6057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.79'. [ 97.921447][ T6063] netlink: 176 bytes leftover after parsing attributes in process `syz.0.83'. [ 98.227928][ T2178] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.488522][ T6081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.91'. [ 98.601736][ T2178] usb 2-1: config 0 has no interfaces? [ 98.682982][ T2178] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 98.836619][ T2178] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.226312][ T2178] usb 2-1: config 0 descriptor?? [ 99.504540][ T5086] Bluetooth: hci0: Unknown advertising packet type: 0x16 [ 99.504609][ T5086] Bluetooth: hci0: Unknown advertising packet type: 0x1c [ 99.512247][ T5086] Bluetooth: hci0: Malformed LE Event: 0x0d [ 99.514438][ T28] audit: type=1326 audit(1777736775.811:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.3.96" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd5059cdd9 code=0x0 [ 99.524337][ T8] usb 2-1: USB disconnect, device number 2 [ 99.549096][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.883870][ T6107] netlink: 28 bytes leftover after parsing attributes in process `syz.0.101'. [ 100.507098][ T6086] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 100.971069][ T6086] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 101.011769][ T6086] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.077126][ T6086] usb 2-1: Product: syz [ 101.105702][ T6086] usb 2-1: Manufacturer: syz [ 101.135028][ T6086] usb 2-1: SerialNumber: syz [ 101.161557][ T6086] usb 2-1: config 0 descriptor?? [ 101.407065][ T6086] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 101.719946][ T28] audit: type=1326 audit(1777736778.021:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6138 comm="syz.2.116" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b50b9cdd9 code=0x0 [ 103.045269][ T6151] loop3: detected capacity change from 0 to 8192 [ 103.358315][ T6086] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 103.436174][ T6086] usb 2-1: USB disconnect, device number 3 [ 103.842082][ T6167] netlink: 176 bytes leftover after parsing attributes in process `syz.3.124'. [ 104.114296][ T28] audit: type=1326 audit(1777736780.411:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6173 comm="syz.1.128" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93ec19cdd9 code=0x0 [ 106.557096][ T6198] netlink: 176 bytes leftover after parsing attributes in process `syz.0.135'. [ 106.757170][ T28] audit: type=1326 audit(1777736783.051:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6201 comm="syz.3.139" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd5059cdd9 code=0x0 [ 109.430085][ T6234] netlink: 176 bytes leftover after parsing attributes in process `syz.1.148'. [ 109.619144][ T6239] loop0: detected capacity change from 0 to 4096 [ 109.626774][ T6239] EXT4-fs: Ignoring removed bh option [ 109.734232][ T6239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.757443][ T6239] capability: warning: `syz.0.151' uses 32-bit capabilities (legacy support in use) [ 110.067158][ T28] audit: type=1326 audit(1777736786.331:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.1.152" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93ec19cdd9 code=0x0 [ 111.778714][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.554396][ T6264] netlink: 176 bytes leftover after parsing attributes in process `syz.2.160'. [ 113.098968][ T6265] loop0: detected capacity change from 0 to 8192 [ 113.531680][ T28] audit: type=1326 audit(1777736789.831:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.3.163" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd5059cdd9 code=0x0 [ 113.627567][ T5086] Bluetooth: hci0: Malformed Event: 0x13 [ 114.058316][ T6086] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.252349][ T6086] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 114.267031][ T6086] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.275446][ T6086] usb 3-1: Product: syz [ 114.280708][ T6086] usb 3-1: Manufacturer: syz [ 114.285958][ T6086] usb 3-1: SerialNumber: syz [ 115.566573][ T6086] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 116.067036][ T28] audit: type=1326 audit(1777736792.361:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6303 comm="syz.0.175" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9d0d9cdd9 code=0x0 [ 116.592352][ T6302] loop1: detected capacity change from 0 to 8192 [ 116.733987][ T6086] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 117.009909][ T6086] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -71 [ 117.024465][ T6086] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 117.045352][ T6086] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 117.062907][ T6086] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 117.075601][ T6086] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 117.097288][ T6086] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 117.141185][ T6086] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 117.184219][ T6086] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 117.223004][ T6086] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 117.258533][ T6086] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 117.304311][ T6086] lan78xx: probe of 3-1:1.0 failed with error -71 [ 117.354744][ T6086] usb 3-1: USB disconnect, device number 2 [ 118.367254][ T5086] Bluetooth: hci2: unexpected subevent 0x04 length: 10 < 11 [ 118.567420][ T28] audit: type=1326 audit(1777736794.861:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.1.185" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93ec19cdd9 code=0x0 [ 121.251393][ T6375] syz.2.195 uses obsolete (PF_INET,SOCK_PACKET) [ 121.255362][ T28] audit: type=1326 audit(1777736797.551:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6376 comm="syz.3.197" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd5059cdd9 code=0x0 [ 127.178743][ T28] audit: type=1326 audit(1777736803.471:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.3.215" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd5059cdd9 code=0x0 [ 128.465990][ T5817] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 128.687026][ T5817] usb 3-1: Using ep0 maxpacket: 16 [ 128.704726][ T5817] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.751168][ T5817] usb 3-1: config 0 interface 0 has no altsetting 0 [ 128.776963][ T5817] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 128.831711][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.853497][ T5817] usb 3-1: config 0 descriptor?? [ 129.700243][ T5817] nzxt-smart2 0003:1E71:2009.0001: item fetching failed at offset 3/5 [ 129.711776][ T5817] nzxt-smart2: probe of 0003:1E71:2009.0001 failed with error -22 [ 129.921590][ T6459] netlink: 176 bytes leftover after parsing attributes in process `syz.3.225'. [ 129.998688][ T6086] usb 3-1: USB disconnect, device number 3 [ 130.034217][ T28] audit: type=1326 audit(1777736806.331:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.0.226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9d0d9cdd9 code=0x0 [ 130.057776][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.424454][ T28] audit: type=1326 audit(1777736808.721:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6492 comm="syz.2.239" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b50b9cdd9 code=0x0 [ 133.229839][ T6520] netlink: 92 bytes leftover after parsing attributes in process `syz.0.250'. [ 133.302623][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.309517][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.823467][ T28] audit: type=1326 audit(1777736810.121:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.2.259" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b50b9cdd9 code=0x0 [ 135.377668][ T28] audit: type=1326 audit(1777736811.681:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6578 comm="syz.1.277" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93ec19cdd9 code=0x0 [ 135.417094][ T967] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 135.609470][ T967] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 135.618733][ T967] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 135.635636][ T967] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 135.646403][ T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.662122][ T967] usb 3-1: Product: syz [ 135.667690][ T967] usb 3-1: Manufacturer: syz [ 135.672977][ T967] usb 3-1: SerialNumber: syz [ 135.689366][ T967] usb 3-1: config 0 descriptor?? [ 135.706105][ T967] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 136.679351][ T28] audit: type=1326 audit(1777736812.981:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.0.291" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9d0d9cdd9 code=0x0 [ 137.317867][ T967] gspca_sunplus: reg_r err -71 [ 137.322808][ T967] sunplus: probe of 3-1:0.0 failed with error -71 [ 137.345504][ T967] usb 3-1: USB disconnect, device number 4 [ 137.951372][ T28] audit: type=1326 audit(1777736814.251:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6638 comm="syz.2.305" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b50b9cdd9 code=0x0 [ 139.024023][ T6664] process 'syz.0.316' launched '/dev/fd/4' with NULL argv: empty string added [ 139.150850][ T5086] Bluetooth: hci2: Malformed Event: 0x13 [ 139.376227][ T28] audit: type=1326 audit(1777736815.671:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6678 comm="syz.3.323" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd5059cdd9 code=0x0 [ 139.399652][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.046969][ T967] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 140.247026][ T967] usb 3-1: Using ep0 maxpacket: 32 [ 140.255797][ T967] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 140.277155][ T967] usb 3-1: config 0 has no interface number 0 [ 140.283392][ T967] usb 3-1: config 0 interface 184 has no altsetting 0 [ 140.307236][ T967] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 140.316443][ T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.352411][ T967] usb 3-1: Product: syz [ 140.359378][ T967] usb 3-1: Manufacturer: syz [ 140.364038][ T967] usb 3-1: SerialNumber: syz [ 140.388270][ T967] usb 3-1: config 0 descriptor?? [ 140.404301][ T967] smsc75xx v1.0.0 [ 141.019535][ T967] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 141.030909][ T967] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 141.855417][ T967] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 141.892119][ T967] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 141.913755][ T967] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 141.937015][ T967] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 141.951490][ T967] usb 3-1: USB disconnect, device number 5 [ 143.760471][ T5086] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 143.771223][ T5086] CPU: 0 PID: 5086 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 143.778832][ T5086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 143.789029][ T5086] Workqueue: hci2 hci_rx_work [ 143.793815][ T5086] Call Trace: [ 143.797133][ T5086] [ 143.800111][ T5086] dump_stack_lvl+0x18c/0x250 [ 143.804853][ T5086] ? show_regs_print_info+0x20/0x20 [ 143.810111][ T5086] ? load_image+0x420/0x420 [ 143.814686][ T5086] sysfs_create_dir_ns+0x26e/0x2a0 [ 143.819859][ T5086] ? sysfs_warn_dup+0xa0/0xa0 [ 143.824584][ T5086] ? do_raw_spin_unlock+0x121/0x230 [ 143.829857][ T5086] kobject_add_internal+0x61c/0xcc0 [ 143.835298][ T5086] kobject_add+0x164/0x240 [ 143.839803][ T5086] ? __rwlock_init+0x150/0x150 [ 143.844681][ T5086] ? kobject_init+0x1e0/0x1e0 [ 143.849691][ T5086] ? _raw_spin_unlock+0x28/0x40 [ 143.854654][ T5086] ? get_device_parent+0x366/0x390 [ 143.859832][ T5086] device_add+0x408/0xc20 [ 143.864227][ T5086] hci_conn_add_sysfs+0xd5/0x1e0 [ 143.869220][ T5086] le_conn_complete_evt+0xf5d/0x1540 [ 143.874557][ T5086] ? hci_event_packet+0x4cb/0x1270 [ 143.879748][ T5086] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 143.886048][ T5086] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 143.891741][ T5086] ? skb_pull_data+0xfb/0x200 [ 143.896476][ T5086] hci_le_conn_complete_evt+0x187/0x440 [ 143.902164][ T5086] ? hci_remote_host_features_evt+0x150/0x150 [ 143.908286][ T5086] hci_event_packet+0x7ba/0x1270 [ 143.913370][ T5086] ? bis_list+0x290/0x290 [ 143.917747][ T5086] ? lockdep_hardirqs_on+0x98/0x150 [ 143.923001][ T5086] ? hci_send_to_monitor+0xd7/0x4f0 [ 143.928336][ T5086] hci_rx_work+0x43a/0xd60 [ 143.932915][ T5086] ? process_scheduled_works+0x96f/0x15d0 [ 143.938690][ T5086] process_scheduled_works+0xa5d/0x15d0 [ 143.944410][ T5086] ? worker_attach_to_pool+0x380/0x380 [ 143.949925][ T5086] ? assign_work+0x3d2/0x5d0 [ 143.954575][ T5086] worker_thread+0xa55/0xfc0 [ 143.959255][ T5086] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 143.965352][ T5086] ? _raw_spin_unlock+0x40/0x40 [ 143.970301][ T5086] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 143.976273][ T5086] kthread+0x2fa/0x390 [ 143.980607][ T5086] ? pr_cont_work+0x560/0x560 [ 143.985377][ T5086] ? kthread_blkcg+0xd0/0xd0 [ 143.990027][ T5086] ret_from_fork+0x48/0x80 [ 143.994503][ T5086] ? kthread_blkcg+0xd0/0xd0 [ 143.999151][ T5086] ret_from_fork_asm+0x11/0x20 [ 144.003998][ T5086] [ 144.011037][ T5086] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 144.027425][ T5086] Bluetooth: hci2: failed to register connection device [ 144.328159][ T6803] syzkaller1: entered promiscuous mode [ 144.341653][ T6803] syzkaller1: entered allmulticast mode [ 145.506924][ T787] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 145.717023][ T787] usb 3-1: Using ep0 maxpacket: 16 [ 145.727815][ T787] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 145.737009][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.755304][ T787] usb 3-1: config 0 descriptor?? [ 145.770686][ T787] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 146.045693][ T6864] netlink: 60 bytes leftover after parsing attributes in process `syz.3.408'. [ 146.055626][ T6864] netlink: 60 bytes leftover after parsing attributes in process `syz.3.408'. [ 146.073589][ T6864] netlink: 60 bytes leftover after parsing attributes in process `syz.3.408'. [ 146.787921][ T787] gspca_sonixj: reg_w1 err -71 [ 146.817852][ T787] sonixj: probe of 3-1:0.0 failed with error -71 [ 146.843510][ T787] usb 3-1: USB disconnect, device number 6 [ 147.930039][ T6927] syzkaller1: entered promiscuous mode [ 147.935695][ T6927] syzkaller1: entered allmulticast mode [ 149.063353][ T6955] loop2: detected capacity change from 0 to 256 [ 149.250526][ T6955] FAT-fs (loop2): Directory bread(block 64) failed [ 149.277874][ T6955] FAT-fs (loop2): Directory bread(block 65) failed [ 149.298498][ T6955] FAT-fs (loop2): Directory bread(block 66) failed [ 149.310187][ T6960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.453'. [ 149.317804][ T6955] FAT-fs (loop2): Directory bread(block 67) failed [ 149.346597][ T6955] FAT-fs (loop2): Directory bread(block 68) failed [ 149.356643][ T6955] FAT-fs (loop2): Directory bread(block 69) failed [ 149.379983][ T6955] FAT-fs (loop2): Directory bread(block 70) failed [ 149.386620][ T6955] FAT-fs (loop2): Directory bread(block 71) failed [ 149.403596][ T6955] FAT-fs (loop2): Directory bread(block 72) failed [ 149.417007][ T6955] FAT-fs (loop2): Directory bread(block 73) failed [ 149.778540][ T5086] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 149.788013][ T5086] Bluetooth: hci0: Injecting HCI hardware error event [ 149.796387][ T5785] Bluetooth: hci0: hardware error 0x00 [ 150.726750][ T6983] netlink: 28 bytes leftover after parsing attributes in process `syz.2.463'. [ 152.627627][ T5785] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 154.712309][ T7024] loop2: detected capacity change from 0 to 4096 [ 154.721200][ T7024] EXT4-fs: Ignoring removed bh option [ 154.852150][ T7024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.304611][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. Stopping sshd: stopped /usr/sbin/sshd (pid 5532) OK Stopping crond: stopped /usr/sbin/crond (pid 5515) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5435) Stopping network: OK Stopping iptables: OK Stopping system message bus: [ 164.000530][ T7155] loop2: detected capacity change from 0 to 4096 [ 164.043955][ T7155] EXT4-fs: Ignoring removed bh option [ 164.194724][ T7155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.742149][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. done [ 166.900768][ T27] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 167.778629][ T27] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 168.187586][ T27] usb 3-1: config 0 has no interface number 0 [ 168.218566][ T27] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 168.277055][ T27] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 168.348744][ T27] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 168.379383][ T27] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 168.406973][ T27] usb 3-1: Product: syz [ 168.415009][ T27] usb 3-1: SerialNumber: syz [ 168.434340][ T27] usb 3-1: config 0 descriptor?? [ 168.451263][ T27] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 168.472810][ T27] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input5 [ 168.670174][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 Stopping klogd: [ 169.654187][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 169.662874][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 169.670177][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 OK [ 169.677666][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 169.685234][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 169.692618][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 169.699866][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 169.707095][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 169.714568][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 169.724579][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 169.757315][ T6086] usb 3-1: USB disconnect, device number 7 [ 169.763246][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 169.819784][ T6086] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 Stopping acpid: [ 170.847358][ T27] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 171.166328][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config OK [ 171.444101][ T27] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 171.496923][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.557997][ T27] usb 3-1: config 0 descriptor?? [ 171.590714][ T27] pwc: Askey VC010 type 2 USB webcam detected. Stopping syslogd: stopped /sbin/syslogd (pid 5123) OK [ 172.001755][ T27] pwc: recv_control_msg error -32 req 02 val 2b00 [ 172.014751][ T27] pwc: recv_control_msg error -32 req 02 val 2700 [ 172.042767][ T27] pwc: recv_control_msg error -32 req 02 val 2c00 [ 172.059088][ T27] pwc: recv_control_msg error -32 req 04 val 1000 [ 172.082220][ T27] pwc: recv_control_msg error -32 req 04 val 1300 [ 172.311311][ T27] pwc: recv_control_msg error -71 req 02 val 2000 [ 172.320592][ T27] pwc: recv_control_msg error -71 req 02 val 2100 [ 172.359345][ T27] pwc: recv_control_msg error -71 req 04 val 1500 [ 172.373228][ T27] pwc: recv_control_msg error -71 req 02 val 2500 [ 172.387472][ T27] pwc: recv_control_msg error -71 req 02 val 2400 [ 172.407544][ T27] pwc: recv_control_msg error -71 req 02 val 2600 [ 172.437114][ T27] pwc: recv_control_msg error -71 req 02 val 2900 [ 172.444989][ T27] pwc: recv_control_msg error -71 req 02 val 2800 [ 172.453905][ T27] pwc: recv_control_msg error -71 req 04 val 1100 [ 172.466956][ T27] pwc: recv_control_msg error -71 req 04 val 1200 [ 172.479877][ T27] pwc: Registered as video103. [ 172.496321][ T27] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 172.541077][ T27] usb 3-1: USB disconnect, device number 8 [ 172.644288][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.545'. umount: can't remount debugfs read-only [ 173.879270][ T7285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.555'. [ 174.396986][ T787] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 174.550321][ T7298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.560'. [ 174.633539][ T787] usb 3-1: Using ep0 maxpacket: 16 [ 174.653840][ T787] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.675055][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.706916][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 174.732795][ T787] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 174.764040][ T787] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.809515][ T787] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 174.829075][ T787] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 174.859495][ T787] usb 3-1: Manufacturer: syz [ 174.890299][ T787] usb 3-1: config 0 descriptor?? [ 175.306931][ T787] rc_core: IR keymap rc-hauppauge not found [ 175.320529][ T787] Registered IR keymap rc-empty [ 175.339902][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 175.387240][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 175.438452][ T787] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 175.470203][ T787] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 175.520349][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 175.541901][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.567'. [ 175.587228][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 175.606755][ T7319] netlink: 164 bytes leftover after parsing attributes in process `syz.0.566'. [ 175.637111][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 175.689778][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 175.758079][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 175.827532][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 175.897106][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only [ 175.938550][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 The system is going down NOW! [ 175.996939][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 Sent SIGTERM to all processes [ 176.057148][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 Connection to 10.128.0.211 closed by remote host. [ 176.135276][ T787] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 176.198865][ T787] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 176.217553][ T787] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 176.246900][ T787] usb 3-1: USB disconnect, device number 9 [ 177.129639][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 177.216732][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.277792][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.331749][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.189504][ T7328] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 178.199488][ T7328] ACPI: PM: Preparing to enter system sleep state S5 [ 178.209473][ T7328] kvm: exiting hardware virtualization [ 178.215084][ T7328] reboot: Power down serialport: VM disconnected.